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Abstract 


The  formal  representation  issues  underlying  the 
use  of  incomplete  knowledge  bases  are  investigated*  It 
is  argued  that  to  effectively  deal  with  incomplete 
knowledge)  a  system  must  first  be  able  to  determine 
where  the  incompleteness  lies*  This  has  two 
consequences:  first,  the  knowledge  base  must  have 
knowledge  about  its  own  incompleteness  and  second,  it 
must  be  possible  to  ask  or  tell  the  knowledge  base 
about  its  incompleteness*  A  formal  model  of  knowledge 
bases  with  these  abilities  is  presented*  The 
characterization  is  in  terms  of  a  logical  language  that 
can  refer  both  to  application  domains  and  to  what 
knowledge  bases  might  know  about  such  domains*  This 
language  is  also  used  to  formulate  questions, 
statements  and  defaults  for  a  knowledge  base*  A 
semantic  and  proof — theoret ic  analysis  is  provided  not 
only  for  the  language  itself,  but  also  for  the 
operations  of  answering  questions,  acquiring  knowledge 
and  assuming  defaults* 
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1.1  THE  PROBLEM 

A  fundamental  principle  underlying  much  of  the  research  in 
Artificial  Intelligence  ( AI )  is  that  the  successful  completion  of 
some  task  (whether  it  be  understanding  natural  language *  scene 
analysis*  problem  solving  etc.)  depends  on  the  availability  of  an 
explicit  body  of  knowledge  related  to  the  task.  This 
knowledge— based  approach  has  led  to  the  development  of  a  branch 
of  AI  whose  main  concerns  are  the  issues  involved  in  representing 
in  a  computer  model  the  knowledge  possessed  about  some  domain. 
The  assumption  here  is  that  there  are  representation  primitives 


that  will  be 

use  f ul 

for 

the 

construction 

and  manipulation 

of 

models  over  many 

domains . 

In 

this  sense* 

the  design  of 

a 

representation 

sc  heme 

can 

be 

viewed  as  a 

solution  to  a  set 

of 

recurring  representation  problems.  The  proliferation  of  ideas 
and  techniques  in  this  area  [Brachman  and  Smith  80]  is  a  good 
indication  of  the  importance  and  difficulty  of  the  problems 
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encountered*  In  this  document  *  I  wiJLJL  investigate  a 

representation  problem  that  has  only  recently  begun  to  receive 
serious  attention”  the  incompleteness  of  knowledge  bases«[ 1] 
While  the  issues  I  will  be  addressing  pertain  mainly  to  AI 
applicat i ons ,  I  suspect  that  any  application  using  an  information 
system  of  some  sort  may  eventually  have  to  face  similar  issues® 

The  knowledge  bases  required  in  many  applications  can  be 
characterized  by  a  lack  of  complete  information  about  the  world 
of  interest*  For  example ,  a  knowledge  base  used  by  a  problem 
solver  attempting  to  discover  the  identity  of  some  individual 
might  contain  facts  such  as 

Pat's  spouse  is  a  30  year  old  student® 

John  is  under  30  years  old® 

Either  Paul  or  Ray  is  a  teacher® 

Some  student  lives  in  Toronto® 


Note  that  these  facts  do  not  say  which  student  Pat  is  married  tof 
what  John's  age  actually  is,  which  of  Paul  or  Ray  is  the  teacher 
or  what  student  lives  in  Toronto®  A  similar  kind  of  knowledge 
base  can  arise  in  medical  applications  when  attempting  to 
diagnose  a  disease  from  a  set  of  vague  symptoms,  or  in  scene 
analysis  where  the  goal  is  to  recognize  an  object  from  a  few 
visual  clues®  The  key  property  of  a  knowledge  base  in  these  and 
other  applications  is  that  it  may  not  have  all  the  pertinent 
information  about  some  relevant  aspect  of  the  world  in  question® 


To  say  that  a  knowledge  base  is  incomplete  is  quite 
different  from  the  somewhat  trivial  observation  that  there  are 
aspects  of  the  world  that  are  irrelevant  to  the  intended 
application  and,  consequently,  not  dealt  with  in  the  knowledge 
base®  In  the  above  examples,  it  is  not  that  John's  age,  Paul's 
occupation  and  Pat's  husband  are  irrelevant  and  therefore  not 
known®  They  are  relevant  and  something  is  indeed  known  about 


[1]  What  I  mean  by  a  "knowledge  base"  will  be  discussed 
informally  in  the  next  chapter  and  formally  in  the  remaining 
chapters®  As  a  first  approximation,  a  "knowledge  base"  is  a 
database  of  facts  that  "knows"  exactly  those  facts  that  are 

stored® 
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'them*  The  knowledge  base  is  incomplete  precisely  because  these 
aspects  of  the  world  are  relevant  but  not  yet  completely 
speci f i ed* 

The  reason  incomplete  knowledge  bases  are  so  important:  is 
thatf  in  many  applications)  the  knowledge  base  undergoes  a 
continual  evolution*  At  each  stage*  information  can  be  acquired 
by  direct  observation  (as  in  some  recognition  applications)  or  by 
the  interaction  with  some  outside  agent  (man  or  machine) •  This 
information  is  potentially  very  vague  or  indefinite  in  nature* 
More  importantly*  the  user  of  the  knowledge  base  cannot  simply 
wait  for  it  to  stabilize  in  some  finai  and  complete  form  since 
this  may  never  happen*  So *  for  many  applications)  what  can  or 
cannot  be  extracted  from  a  knowledge  base  will  always  be  distinct 
from  what  is  true  or  false  in  the  worid  being  modelled* 

Since  any  action  to  be  taken  by  a  user  (man  or  machine)  of  a 
knowledge  base  will  ultimately  be  based  on  his  model*  it  is  very 
important  that  the  user  be  aware  of  the  limits  of  what  can  and 
cannot  be  concluded  about  some  world  from  an  incomplete  knowledge 
base*  Otherwise*  he  may  be  dangerously  misled  by  his  model 
either  by  assuming  that  it  knows  more  than  it  actually  does  or* 
more  conservatively*  by  deciding  that  it  knows  very  little* 
Depending  on  the  application*  the  result  of  this  type  of  misuse 
can  range  from  negligible  to  catastrophic*  The  problem  of 
incompleteness*  then*  is  that  of  providing  a  useful  and  reliable 
tool  given  that  a  knowledge  base  may  be  only  a  partial  model  of 
the  world  it  is  intended  to  represent* 

The  best  way  of  dealing  with  incompleteness  in  a  systematic 
fashion  is  to  ensure  that  the  knowledge  base  itself  is  aware  of 
the  limits  of  what  it  does  and  does  not  know*  In  fact*  for  a 
large  and  complex  knowledge  base*  this  may  be  the  only  practical 
way  of  keeping  track  of  these  limits*  The  resulting  knowledge 
base  will  then  be  both  useful  and  reliable  to  the  extent  that  the 
representation  scheme  being  used  provides  a  mechanism 
carefully  exploring  and  establishing  these  limits* 


for 
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1 . 2  AN  EXAMPLE 

Consider,  for  example*,  a  system  working  in  (a  simplified 
version  of)  the  blocks  world  [Winograd  72]  where  there  are  only 
two  blocks*  A  and  B  and  three  closed  boxes*  Box 1  ,  Box2  and  Box3f 

on  a  table*  Neither  block  is  visible  on  the  table  but,  by 

opening  Box3,  the  system  discovers  that  it  contains  only  block  B® 
The  question  is  how  to  represent  the  current  knowledge  of  the 
system®  Obviously,  it  should  know  that 

Block  A  is  either  in  Boxl  or  Box2* 

Specifically,  it  does  not  know  which  box  contains  the  block  and 
so  has  incomplete  knowledge  of  the  situation®  For  this  knowledge 
base  to  be  aware  of  the  limits  of  what  it  knows,  it  should  also 
know  that 

It  is  not  known  that  block  A  is  in  Boxl* 

It  is  not  known  that  block  A  is  in  Box2« 

Consequently,  the  knowledge  base  has  to  know  that  there  is  a  box 
that  contains  block  A  but  that  is  not  known  to  contain  block  A* 

To  be  able  to  exhibit  these  capabilities,  the  knowledge  base 
has  to  be  able  to  clearly  distinguish  between  what  it  knows  about 
the  boxes  and  what  is  true  of  them*  In  particular,  it  needs  to 
know  that 

Some  box  contains  A  and  is  not  known  to  contain  A* 

If  it  does  not  dif f eren ti at e  between  what  it  knows  and  what  is 
true,  its  knowledge  here  would  be 

Some  box  contains  A  and  does  not  contain  A* 

something  altogether  different*  In  other  words,  the  knowledge 
base  has  to  distinguish  between  what  Boxl  contains  (maybe  A  and 
maybe  not)  and  what  Boxl  is  known  to  contain  (absolutely 
nothing) •  The  only  way  the  distinction  can  be  avoided  is  when 
the  knowledge  base  Is  c  omplete  in  which  case  if  is  Justified  in 
identifying  what  is  known  with  what  is  true*  This  is  precisely 
what  happens  if  the  system  opens  Boxl  and  discovers  what  is 
inside*  A  fundamental  assumption  of  my  research,  however,  is 
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that  this  is  not  always  possible  (or  desirable)  so  that  we  will 
have  to  deal  with  incomplete  knowledge* 

There  is  no  point  in  having  knowledge  bases  that  can  know 
where  they  are  incomplete  if  a  system  cannot  extract  this 
information  from  the  knowledge  base*  For  example,  the  system  (or 
user)  should  obviously  be  able  to  ask  the  knowledge  base 

Is  block  A  in  Boxl? 

and  be  correctly  answered  "unknown".  But  it  should  also  be  able 
to  ask  questions  about  the  completeness  of  the  knowledge  base 
such  as 


Do  you  know  where  all  the  blocks  are? 
or  Is  there  a  box  whose  contents  are  unknown? 

and  be  correctly  answered  "no"  and  "yes",  respectively*  Any 
other  reply  would  be  quite  misleading* 

The  reason  these  questions  are  important:  is  that  before  a 
system  can  decide  what  to  do  about  the  incompleteness  of  its 
knowledge  base,  it  has  to  be  able  to  determine  where  the 
incompleteness  lies*  That  is  to  say,  before  it  can  plan  to  get 
around  its  lack  of  knowledge  (by  making  assumptions  or  Just 
opening  another  box),  it  has  to  find  out  where  knowledge  is 
lacking*  So  it  must  be  possible  to  formulate  questions  that 
refer  both  to  the  application  domain  (the  blocks,  the  boxes)  and 
to  the  state  of  the  knowledge  base  (what  is  and  is  not  known)* 

If  we  assume  that  a  knowledge  base  can  acquire  information 
by  being  told  various  things,  we  will  also  want  to  be  able  to 
tell  the  knowledge  base  about  its  incompleteness*  The  reason  for 
this  is  that  a  knowledge  base  may  only  have  incomplete  knowledge 
about  its  incompleteness*  Suppose,  for  example,  that  the  answer 
to  the  question 

Do  you  know  where  all  the  blocks  are? 

is  "unknown"*  This  can  happen  even  if  the  knowledge  base  knows 
the  location  of  all  the  blocks  it  knows  about.  It  may  simply 
fail  to  know  that  the  blocks  it  knows  about  are  all  of  them*  So 
we  should  be  able  to  tell  it  whether  or  not  it  has  all  the  blocks 
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by  stating  either 

There  are  no  blocks  other  than  the  known  ones® 

(i*e*  you  are  not  missing  any  blocks) 
or  There  is  a  block  other  than  the  known  ones® 

(i*e®  you  are  missing  some  blocks) 

In  other  words?  we  should  be  able  to  tell  it  whether  or  not  it 
has  completeness  in  certain  areas® 

The  reason  these  statements  are  important  is  that  an 
incomplete  knowledge  base  must  be  careful  about  what  it  assumes 
about  the  world*  In  this  example?  it  should  not  assume?  without 
any  evidence?  that  the  only  blocks  are  those  it  knows  about® 
Because  of  this?  we  need  a  method  of  informing  the  knowledge  base 
when  such  an  assumption  is  warranted?  iJE  ever*  So?  as  was  the 
case  with  questions?  statements  should  also  be  able  to  refer  both 
to  the  application  domain  and  to  the  state  of  the  knowledge  base* 


1.3  THE  APPSOACH 

It  might  be  possible  to  immediately  construct  a 
representation  scheme  that  extends  an  existing  one  to  include  the 
capabilities  I  mentioned  in  the  previous  section*  Some 
representation  schemes  already  seem  to  acknowledge  the 
incompleteness  of  knowledge  bases  in  their  use  of  terms  like 
“partial  description'®  (e*g*  KRL  [  Bob  row  and  Winograd  77])  or 
"unknown"  (e.g®  PSN  [Levesque  and  Mylopoulos  79])*  What  appears 
to  be  missing  here?  however?  is  a  clear  and  precise  account  of 
the  relationship  between  knowledge  bases  and  worlds  given  that  a 
knowledge  base  is  only  a  "partial  description"  of  a  world  or  that 
some  aspects  of  the  world  are  "unknown®1* 

More  generally?  there  are  a  number  of  questions  about 
incomplete  knowledge  bases  that  a  representation  scheme  should  be 
able  to  answer.  When  is  a  knowledge  base  incomplete?  Can  a 
knowledge  base  ever  be  complete?  What  kinds  of  incompleteness 
are  allowed  in  a  knowledge  base?  Can  a  knowledge  base  be  so 
incomplete  as  to  know  nothing  at  all?  In  what  sense  can  a 
knowledge  base  have  me ta-knowledge  about  itself?  Can  this 
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me t a— knowledge  also  be  Incomplete?  What  can  a  knowledge  base  be 
told  or  asked  about  its  incompleteness?  What  does  it  mean  to 
assume  a  deiault  in  the  absence  of  complete  knowledge? 

The  fact  that  these  questions  have  yet  to  be  given  a 
satisfactory  answer  by  any  representation  scheme  suggests  that 
there  are  some  fundamental  issues  that  should  be  investigated 
before  attempting  to  design  a  new  scheme*  The  purpose  of  my 
research  is  to  investigate  these  issues  by  developing  a  formal 
framework  where  the  questions  can  indeed  be  answered* 

The  approach  I  take  involves  three  major  levels*  Any  theory 
of  knowledge  bases  should  say  something  about  knowledge  andt 
consequently,  presupposes  a  theory  of  truth.  For  example,  before 
you  can  say  what  it  means  for  a  knowledge  base  to  know  that  two 
terms  are  coref er en tial ,  you  have  to  say  what  it  means  for  two 
terms  to  be  coref erenti al •  So  the  first  level  of  the  analysis 
deals  with  what  is  true  in  a  world*  To  this  effect,  a  formal 
logical  language  for  talking  about  a  world  is  introduced*  The 
next  step,  is  to  consider  a  second  formal  language  that  includes 
the  first  but  can  also  talk  about  what  a  knowledge  base  knows* 
It  is  within  this  second  language  that  the  relationship  between 
knowledge  bases  and  worlds  can  be  expressed  and  properties  of 
knowledge  bases  can  be  stipulated  or  verified*  The  final  step  is 
to  use  this  language  to  formulate  questions,  statements  and 
defaults  for  a  knowledge  base  and  to  examine,  in  an  abstract  way, 
the  operations  of  answering  questions,  acquiring  knowledge  and 
assuming  defaults* 

An  important  advantage  of  my  approach  is  that  it  has  a 
precise  semantic  and  proof — the oreti c  characterization*  This 
applies  both  to  the  language  itself  and  to  the  operations  on 
knowledge  bases  that  use  the  language*  In  all  cases,  the 
semantic  interpretation  is  shown  to  correspond  exactly  to  the 
pr oo f — theor e t ic  one* 

To  summarize,  then,  my  research  deals  with  two  major  issues! 
first,  what  it  should  mean  for  a  knowledge  base  to  have 
incomplete  knowledge  of  some  world,  and  second,  what  it  should 
mean  to  ask  and  tell  a  knowledge  base  about  its  incompleteness* 
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Of  course*  this  comes  nowhere  near  exhausting  the  relevant 
issues  *  The  whole  problem  of  what  a  knowledge-abased  system 
should  actually  do  about  its  incompleteness?  for  example  *  is  left 
unresolved®  The  product  of  my  research  is  neither  a 
knowledge-based  system  nor  a  representation  scheme®  Rather?  what 
is  to  be  gained  is  a  better  unders t and! ng  of  some  of  the 
theoretical  issues  underlying  incomplete  knowledge  bases® 


1.4  RELATED  WORK 

In  this  section?  I  will  briefly  summarize  the  research  that 
has  the  most  direct  bearing  on  this  research®  A  more  thorough 
comparison  with  the  other  approaches  will  appear  in  subsequent 
chapters  ® 

As  mentioned  earlier?  the  general  motivation  for  the 
research  arises  from  work  in  Knowledge  Representation®  A  recent 
survey  of  the  research  in  this  field  appears  in  [ Brachman  and 
Smith  80]  while  a  more  topic  oriented  introduction  can  be  found 
in  [Barr  and  Davidson  80]®  Among  the  most  influential  papers  in 
the  field?  one  might  mention  [McCarthy  and  Hayes  69] »  [Hayes  74 ] » 
[ Winograd  73]?  [ Winograd  75]?  [Woods  75]  and  [Brachman  79]® 

The  treatment  of  incomplete  knowledge  in  the  proposed 
language  owes  much  to  the  work  of  Hintikka  on  knowledge  and 
belief  [Hintikka  62]?  [Hintikka  71]®  This  work  is  also  the 
ancestor  of  the  work  of  Moore  [Moore  77]?  [Moore  80]  and  McCarthy 
[McCarthy  et  al®  78]®  In  all  cases?  a  competence [ 1 ]  oriented 
treatment  of  knowledge  is  involved?  distinguishing  the  work  from 
the  computational  models  of  [Cohen  78]  and  [Moore  and  Hendrix 
79]®  A  starting  point  for  the  above  research  is  the  classic 
philosophical  work  on  knowledge  and  belief  (see  e®g®  [Roth  and 
Gallis  70]  or  [Griffiths  67])  and  the  formalization  of  modal 
logic  due  to  Kripke  [Kripke  71]?  [Hughes  and  Cresswell  72]®  What 
distinguishes  my  work  is  an  emphasis  on  what  might  be  called 
"auto-epistemic"  reasoning  [Moore  80b]?  that  is?  reasoning  about 


[1]  What  I  mean  by  competence  wi 11  be  discussed  in  the  next 
chapter®  The  idea  is  to  consider  as  known  anything  that  follows 
logically  from  what  is  known  regardless  of  whether  the  knower 
himself  has  made  the  deductions® 
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one's  own  knowledge  as  opposed  to  the  knowledge  ascribed  to 
others • 

A  second  related  area  is  the  work  in  what  has  been  called 
non— raonoton ic  reasoning:  [McDermott  and  Doyle  78],  [McDermott 
80 3 ,  [McCarthy  80] ,  [Weyhrauch  80]  and  [Reiter  80]*  The  emphasis 
there  is  on  a  (proof  theoretic)  formalization  of  reasoning  when 
assumptions  have  to  be  made  and  perhaps  later  retracted.  At  the 
fringe  of  this  area  lies  the  work  on  belief  revision*  surveyed  in 
(Doyle  and  London  80].  While  my  immediate  goal  is  not  just  to 
incorporate  defaults  or  assumptions  info  a  logic*  some  of  the 
techniques  used  in  n on— mono tonic  formalizations  will  be  applied 
to  the  problem  of  incomplete  knowledge  bases. 

The  issue  of  incompleteness  is  addressed  more  directly  in 
[Moore  75]  from  the  point  of  view  of  a  procedural  deduction 
system  of  the  PLANNER  (Hewitt  72]  variety.  Given  that  some  form 
of  logical  negation*  disjunction  and  quantification  is  required 
to  specify  an  incomplete  knowledge  base*  Moore  examines  what 
impact  these  constructs  should  have  on  the  deductive  component  of 
the  scheme.-  This  is  an  attempt  to  bridge  the  gap  between  the 
resolution  theorem  provers  for  first  order  logic  (Robinson  65] 
and  the  antecedent/consequent  reasoning  of  PLANNER. 

Another  paper  that  focusses  on  incompleteness  is  that  of 
Collins  [Coilins  et  al.  75].  There,  the  major  issue  is  how 
people  reason  from  incomplete  knowledge  and  especially  what 
general  rules  and  heuristics  are  used  to  circumvent  this 
incompleteness.  The  emphasis  is,  therefore,  on  psychological 
validity  and  not  on  the  reliability  or  usefulness  of  the 
resulting  information  system. 

A  first  attempt  at  dealing  with  the  logic  of  incomplete 
knowledge  bases  is  found  in  the  work  of  Belnap  [ Belnap  75], 

( Belnap  77]  and  applied  in  [Shapiro  and  Bechtel  76],  among 
others.  He  proposes  a  four-valued  logic  where  the  extra  two 
values  can  be  read  as  "unknown"  and  "inconsistent"  respectively. 
His  approach  has  the  advantage  of  requiring  only  a  small  change 
to  the  standard  logical  semantics.  It  does,  however,  have  a 
serious  drawback  which  is  discussed  in  chapter  three  along  with  a 
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modification  to  the  approach  suggested  in  [Bruce  733  and  used  in 
[Vassiliou  80]® 

The  multi-valued  logic  approach  to  incomplete  knowledge  has 
also  found  its  way  into  Database  Management  research  under  the 
guise  of  "null  values"  ( £ Codd  703 e  [Grant  773s  [Vassiliou  803)® 
The  major  concern  here  is  not  on  the  expressive  power  required 
for  incompleteness)  but  more  on  the  efficiency  of  query 
evaluation  for  large  databases  with  limited  forms  of 
incompleteness®  An  approach  closer  in  spirit  to  mine  is  that  of 
Lipski  [Lipsski  773s  [Lipski  783®  He  also  uses  a  logic  and 
though  no  complete  axiomatization  is  presented)  the  semantic 
framework  proposed  is  a  variant  on  mine®  His  framework  also 
suffers  from  expressive  limitations*  however®  In  particular*  it 
is  shown  in  [Lipski  783  that  certain  kinds  of  incomplete 
knowledge  cannot  be  represented® 

1.5  DOCUMENT  ORGANIZATION 

e 

In  the  next  chapter*  the  concept  of  a  knowledge  base  is 
examined  informally  from  two  points  of  view*  The  first  treats  a 
knowledge  base  as  something  that  can  be  said  to  have  knowledge 
subject  to  three  assumptions®  The  second  considers  a  knowledge 
base  as  something  that  can  be  told  or  asked  about  an  application 
domain®  The  first  motivates  the  topics  of  chapters  three  and 
four  while  the  second  motivates  those  of  five  and  six® 

Chapter  three  introduces  the  logical  framework  in  terms  of 
PL*  the  language  of  the  propositional  logic®  First  of  all* 
complete  world  descriptions  with  respect  to  this  language  are 
considered®  These  are  then  generalized  to  partial  world 
descriptions  to  allow  for  an  "unknown"  truth  value®  The  language 
KPL,  which  includes  PL  as  a  subset*  is  then  presented®  This 
language  allows  one  to  speak  of  a  world  and  a  knowledge  base 
simultaneously  and  independently •  A  proof  and  model  theory  for 
KPL  is  provided  and  compared  to  two  other  approaches*  one 
involving  modal  logic*  and  the  other*  a  formalization  of  the 
meta-language  of  PL® 
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In  chapter  four f  the  much  richer  language  of  first  order 
predicate  calculus t  FOPCj  is  considered*  The  development  of 
chapter  three  is  briefly  repeated  but  with  the  worlds  generalized 
to  those  describable  in  FOPC*  A  new  language ,  analogous  to  KPL , 
called  KFOPC,  is  introduced  along  with  an  axioaatization  and  a 
semantics*  Among  the  additional  features  discussed  are  a  proper 
treatment  of  quantification,  identity  and  both  rigid  and 
non-rigid  terms* 

• 

In  chapter  five,  the  language  KFCPC  is  applied  to  the 
definition  and  examination  of  knowledge  bases*  To  this  end,  the 
notion  of  a  representable  knowledge  base  is  introduced  as  one 
that  can  be  represented  by  a  finite  set  of  sentences*  A  query  to 
a  knowledge  base  is  translated  into  a  question  involving  a  new 
non— mono  tonic  proo f— theore ti c  operator*  A  semantics  for  this 
operator  is  also  presented  and  proven  appropriate  for  the  task* 
The  method  of  defining  knowledge  bases  is  then  extended  to  allow 
a  knowledge  base  to  be  told  whether  or  not  it  knows  about  all 
individuals  of  a  certain  kind*  This  is  also  done  semantically 
and  proof —theore tic a lly • 

In  chapter  six,  a  suggestion  is  made  as  to  how  my  research 
might  be  unified  with  more  traditional  Knowledge  Representation* 
To  motivate  the  feasibility  of  this  unification,  a  method  of 
handling  defaults  and  prototypes  is  proposed*  It  is  also  shown 
how  the  ordering  aspect  of  the  inheritance  of  defaults  can  be 
understood  in  the  context  of  my  framework* 

Finally,  in  chapter  seven,  the  major  contributions  of  the 
thesis  are  reviewed,  the  technical  results  are  summarized  and 
suggestions  are  made  for  future  research* 


CHAPTER  2 


KNOWLEDGE  BASES 


2*1  The  Knowledge  in  Knowledge  Bases 
2«1«1  World  Knowledge 
2*1*2  Meta  Knowledge 
2*1*3  The  World  Language 
2*2  The  Interaction  with  Knowledge  Bases 
2*2*1  Questions 
2*2*2  Statements 
2*3  Summary 


In  this  chapter f  I  will  attempt  to  clarity  informally  what  I 
mean  by  a  knowledge  base*  As  will  become  obvious,  the  sense  I 
have  in  mind  is  limited  in  many  ways*  The  first  purpose  of  the 
chapter,  then,  is  to  state  some  of  the  intrinsic  limitations, 
simplifications  and  assumptions  of  my  approach1*  The  second  goal 
is  to  provide  an  intuitive  foundation  for  the  technical  content 
of  the  remaining  chapters*  The  first  section  motivates  the 
issues  that  will  be  taken  up  in  chapters  three  and  four,  while 
the  second  section  deals  with  those  of  chapters  five  and  six* 

In  the  first  section,  I  look  at  the  knowledge  of  knowledge 
bases  directly  and  conclude  that  it  is  best  understood  in  terms 
of  an  underlying  language  that  talks  about  an  application  domain* 
In  the  second  section,  I  examine  how  a  knowledge-based  system 
might  interact  with  a  knowledge  base  and  state  some  desirable 
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properties  of  the  language  of  interaction®  In  both  cases# 
knowledge  bases  are  treated  as  abstract  entities  satisfying 
certain  properties  independently  of  any  concrete  implementation. 

2.1  THE  KNOWLEDGE  IN  KNOWLEDGE  BASES 

The  question  I  will  address  in  this  section  is  the 
following : 

What  is  a  knowledge  base  and  in  what  sense  can  it  be 
said  to  know  something? 

In  general#  there  Is  probably  no  clear  satisfactory  answer  to 
this  question#  so  it  is  best  to  consider  some  assumptions  that 
make  the  question  more  tractable. 


2.1.1  World  Knowledge 

My  first  assumption  is  that  a  knowledge  base  (or  KB  for 
short)  always  has  the  property  of  being  about  some  application 
domain.  In  other  words#  I  am  not  going  to  consider  something  as 
a  KB  unless  there  are  worlds  about  which  it  can  be  said  to  have 
knowledge.! 1]  This  immediately  raises  a  second  question: 

What  is  a  world  and  in  what  sense  can  something  be  said 

to  be  true  in  it? 

This  question  seems  at  least  as  perplexing  as  the  first. 
However#  it  can  be  tackled  provided  we  are  willing  to  treat  the 
matter  in  terms  of  a  specific  language.  Then#  a  correspondence 
can  be  drawn  between  what  is  true  in  a  world  and  what  is  known  by 
a  KB  in  order  to  answer  the  first  question. 

The  second  assumption  I  make,  therefore#  is  that  it  is 
sufficient  to  think  of  worlds  in  terms  of  the  expressions  of  some 
particular  1 anguage  #  L.  We  need  the  right  sort  of  language  here# 
of  course,  specifically,  the  kind  whose  expressions  can  be 


[ 1 ]  Moreover#  the  only  relevant  aspect  of  a  KB  from  this  point  of 
view  is  its  descriptive  aspects,  what  it  knows  about  these 
worlds.  While  this  immediately  eliminates  most  of  what  is  of 
concern  in  knowledge— based  systems#  I  will  attempt  to  show  that 
not  everything  of  interest  has  been  eliminated'. 
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•thought  of  as  being  true  in  some  worlds  and  false  in  others«£2] 
Given  this?  we  might  answer  the  second  question  as  follows? 

A  world  is  anything  that  can  be  described  by  a 
true/ false  interpretation  of  the  sentences  of  L®  The 
world  so  described  has  as  true  whatever  sentences  are 
interpreted  as  true® 

So?  our  first  question  about  a  KB  can  be  answered  in  a  similar 
fashion  ? 

A  KB  is  anything  that  can  be  described  by  a 

known/ unknown  interpretation  of  the  sentences  of  L« 

The  KB  so  described  knows  whatever  sentences  are 
interpreted  as  known* 

The  relationship  between  the  two  interpretations  is  that  a 

sentence  is  "known*'  when  the  KB  thinks  it  is  true  and  "unknown" 
when  it  is  not  the  case  that  the  KB  thinks  it  is  true® £3]  This 
is  a  very  general  definition  since  L  can  be  any  set  of  sentences® 
Cn  the  other  hand?  it  does  account  for  the  relationship  between 
KBs  and  worlds  since  L  is  used  in  both  cases® 

Of  course?  an  interpretation  in  the  above  sense  is  not  Just 
an  arbitrary  mapping  from  the  sentences  of  L  to  true/false  (or 
known/unknown)®  Depending  on  the  nature  of  L?  various 
constraints  wi 11  be  imposed  on  the  well-formedness  of 
interpretations®  If  L  has  a  negation  operator?  for  example?  we 
probably  want  to  say  that  a  sentence  is  interpreted  as  true 
exactly  when  its  negation  is  interpreted  as  false®  We  need  not 
say?  though?  that  a  sentence  is  interpreted  as  known  exactly  when 
its  negation  is  unknown®  But  assuming  the  true/false 

interpretation  rules  are  fixed?  there  will  have  to  be  constraints 
on  the  known/unknown  interpretations  and  their  relation  to 
true/false  interpretations®  The  next  two  assumptions  I  make  deal 
with  these  constraints® 


[2]  Those  aspects  of  the  world  to  which  the  language  L  does  not 
apply  are  assumed  irrelevant®  Two  worlds  are  to  be  treated  the 
same  when  they  agree  on  which  sentences  of  L  are  true® 

[3]  There  is  another  technical  sense  of  "unknown"  which  means  not 
known  to  be  true  and  not  known  to  be  false®  Here?  I  mean 
"unknown"  as  "not  known"® 
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The  first  assumption 
contradictory  information* 
operator*  either  a  sentence 
as  unknown*  More  generally 


is  that  a  KB 
If  the  language 
or  its  negation  must 
the  assumption  is 


never  contains 
L  has  a  negation 
be  interpreted 


Assump  t  ion  of  Cons i  ste nc y  : 

There  is  a  world  where  eve 
true  • 


For  every  KB*  there  must  be 
everything  that  is  known 
we  call  a  world  compatible 
sentence*  the  assumption 
some  world*  This  leads  to 


a  true/ 
by  that  KB 
wi th  a  KB 
says  that 
the  next  a 


ry  known  sentenc 


false  interpretat 
is  interpreted  as 
if  it  satisfies  ev 
a  KB  must  be  compa 
s  sump  ti on l 


e  is 


ion  where 
true*  If 
ery  known 
tible  with 


Assumpt ion  of  Competence 

Each  unknown  sentence  is  false  in  some  compatible 
world* 


If  a  sentence  is  true  in  all  compatible  worlds,  then  that 
sentence  is  known*  In  particular*  if  the  constraints  on 
true/false  interpretations  are  such  that  a  sentence  is  always 
interpreted  as  true*  then  the  sentence  must  be  known*  A  KB  can 
be  viewed  as  knowing  the  rules  of  the  true/false  intepre ta tions 
in  that  it  will  know  everything  that  must  be  true  by  virtue  of 
these  rules* [4] 


For  example,  suppose  that  L  is  the  language  of  the 
propositional  calculus  (as  indeed  it  is  in  the  next  chapter)  with 
the  standard  interpretation*  The  assumptions  boil  down  to  the 
foil  owing: 

Consistency:  If  a  is  known,  then  -ia  is  unknown* 
Competence:  All  the  tautologies  are  known* 

If  a  and  (a=>p)  are  known,  then  so  is  p* 

So  the  two  assumptions  together  determine  the  limits  of  how 


[4]  This  is  in  sharp  contrast  to  the  "performance"  models  of 
knowledge  in  [Moore  and  Hendrix  79],  for  example,  where  what  they 
call  a  "belief  set"  need  not  be  closed  under  the  rules  of  the 
language*  The  sense  of  "know"  my  assumption  leads  to  is  perhaps 
best  understood  as  "follows  under  the  rules  of  L  from  what  is 
known" • 
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little  and  how  much  a  KB  can  be  interpreted  as  knowing®  With  the 
least  amount  of  world  knowledge#  the  KB  only  knows  the 
tautologies,  every  world  is  compatible  with  what  it  knows®  As 
information  is  acquired#  new  sentences  become  known  and  the  range 
of  worlds  it  could  be  about  is  restricted*  Finally#  in  the 
limit#  enough  information  is  acquired  to  rule  out  all  but  one 
world  and  the  KB  knows  everything  about  that  world®  Any 
additional  information  would  either  be  redundant  or 
contradictory®  In  this  last  case#  the  KB  is  complete;  otherwise 
it  is  incomplete®  A  KB  can  thus  be  thought  of  as  a  parti al 
description  of  a  world  that  is  refined  through  the  acquisition  of 
knowl edge • 

These  are  the  only  two  assumptions  about  world  knowledge 
that  are  needed®  However#  two  non— assumpt ions  should  at  least  be 
menti oned® 

Assumption  of  Possible  Incompleteness 

There  need  not  be  a  world  where  everything  true  is  known® 

This  is,  of  course#  implicit  in  the  above  in  that  a  KB  need  not 
form  a  complete  description  of  any  world®  The  second 
non— assumpt ion  is 

Assumption  of  Possible  Inaccuracy 

What  is  known  need  not  be  true® 

Stated  differently#  the  real  world  need  not  be  among  those 
compatible  with  a  KB®  This  is  not  to  say  that  an  inaccurate  KB 
is  desirable  in  general#  but  only  that  the  well-formedness  of  a 
KB  does  not  depend  on  its  accuracy®  In  particular#  I  am  allowing 
for  a  count er—fac tual  KB®[5]  Since  a  KB  can  be  an  incomplete  and 
inaccurate  model  of  the  real  world#  there  need  not  be  any 
relationship  between  what  a  KB  really  knows  and  what  is  really 
true® 


[5]  The  term  "knowledge”  is  usually  taken  to  denote  true  and 
justified  belief  [Roseboom  70#  p®131]#  among  other  things 
[Gettier  67 3 •  So  perhaps,  "rational  belief"  would  be  more 
appropriate  here®  On  the  other  hand#  in  [ Merri am— Webster  763# 
"knowledge"  can  mean  "something  learned  and  kept  in  the  mind" 
where  "learn"  can  mean  "memorize"®  So  despite  the  fact  that  all 
formalizations  of  knowledge  based  on  [Hintikka  623  have  made  the 
assumption  of  accuracy#  I  feel  somewhat  justified  in  not  doing  so 
in  the  context  of  KBs® 
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2*1*2  Meta  Knowledge 


The  universe  under  consideration  In  the  previous  subsection 
includes  both  a  world  and  a  KB*  To  allow  for  the  presence  of 
meta— knowledge  in  a  KB#  we  need  only  insist  that  a  KB  have 
knowledge  about  this  universe  and  not  just  the  world*  To  do  so, 
we  need  a  new  language,  KL,  that  talks  about  this  universe  and 
whose  sentences  can  be  thought  of  as  being  either  true  or  false 
and  either  known  or  unknown*  Since  KL  talks  about  a  KB  as  well 
as  a  world,  it  must  be  the  case  that  for  each  sentence  of  L, 
there  is  another  that  says  that  the  first  is  known  by  the  KB* 
However,  we  also  want  to  allow  the  KB  to  know  about  its 
me t a— knowledge ,  its  meta— me ta— kno wledge  and  so  on*  So,  for  any 
sentence  of  KL ,  there  is  another  that  says  that  the  first  is 
known  by  the  KB*  The  effect  of  this  generalization  is  that  to 


describe  such 

a 

universe , 

including  a 

world  and  a  KB 

with 

meta-knowledge. 

we 

oeed  only 

consider 

true/false  interpretations 

of  the  sentenc 

es 

of  KL. 

We  do 

no  t 

have  to  specify 

whi  ch 

sentences  are  kn 

own 

since  thi 

s  can  be 

done 

by  interpreting 

other 

sentences  (that  say  that  the  first  ones  are  known)  as  true*  So 
both  the  world  and  the  KB  are  described  by  a  true/false 
interpretation  of  the  sentences  of  KL • 


For  this  to  work  properly,  we  must  insist  that  whatever 
constraints  are  imposed  on  the  interpretation  of  sentences  of  L 
continue  to  apply*  Moreover,  the  constraints  of  consistency  and 
competence  should  also  apply  to  the  enlarged  language*  So  the 
only  question  left  unanswered  is  how  to  interpret  me t a— knowledge • 
The  assumption  I  make  is  the  following! 

Assuapt ion  o f  C losure 

Met  a— knowledge  is  complete  and  accurate* 

If  a  sentence  of  KL  is  true  or  false  independently  of  the  world 
(that  is,  a  sentence  about  the  KB  only),  then  this  sentence  is 
true  exactly  when  it  is  known*[l]  In  particular,  there  will 
never  be  any  reason  to  doubt  what  a  KB  knows  about  itself!  it  is 


[1]  The  sense  in  which  a  KB  has  meta-knowledge  at  all  must  be 
understood  in  the  context  of  the  assumption  of  competence*  It 
need  not  have  stored  or  derived  everything  that  is  true  of 
itself*  Conceptually,  however,  I  assume  that  the  knowledge  is 
there  in  the  same  way  that  everything  that  follows  from  what  is 
known  is  there* 
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assumed  to  be  the  final  authority  on  what  it  does  and  does  not 
knowe  Moreover#  there  will  never  be  reason  to  inform  the  KB 
about  itself;  we  can  concentrate  on  letting  it  acquire  knowledge 
about  the  world ® 

The  three  assumptions  of  consistency#  competence  and  closure 
are  the  only  ones  I  make  about  the  knowledge  of  a  KB®  In  the 
next  chapter#  I  will  show  some  of  the  consequences  of  these 
assumptions®  In  particular#  I  will  show  how  consistency  is 
implied  by  the  other  two  and  that  these  assumptions  always  force 
a  KB  to  make  the  assumption  of  accuracy®  So  although  what  is 
known  need  not  be  true#  a  KB  will  always  think  that  what  it  knows 
is  true® 


2(1*3  The  World  Language 

A  few  comments  are  in  order  regarding  the  L  referred  to  in 
this  section®  As  will  become  obvious  in  the  remaining  chapters# 
the  language  I  am  primarily  interested  in  is  FOPC#  the  language 
of  the  first  order  predicate  calculus  (e®g®  [Mendelsohn  64] ) • 
However#  I  will  begin  my  analysis  with  the  much  simpler  language 
of  the  propositional  calculus® 

The  assumption  at  work  here  is  that  FOPC  has  sufficient 
descriptive  power  to  express  what  is  known  by  a  KB  about  the 
world®  In  fact#  my  only  concern  about  the  language  L  is  that  it 
should  be  sufficiently  expressive®  This  is  not  to  suggest  that 
FOPC  need  be  the  representation  scheme  used  by  the  KB#  however® 
There  are  very  good  reasons  to  believe  that  FOPC  alone  would  be 
inadequate  for  the  task®[l]  My  only  assumption  is  that  whatever 
a  KB  is  claiming  about  a  world  can  be  stated#  however  clumsily# 
in  FOPC®  For  my  purposes#  all  other  aspects  are  secondary® 

It  might  be  argued#  however#  that  FOPC  is  still  inadequate 
even  In  this  role  since  many  current  representation  schemes  are 
(or  at  least  may  be)  more  expressive  than  FOPC*  To  a  certain 
extent#  this  criticism  is  Justified®  Perhaps  a  more  powerful 


[1]  Some  of  these  are  discussed  in  [Brachman  79]  and  [Israel  and 
Brachman  81]®  A  related  argument  appears  in  chapter  six® 
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language  is  required  such  as  an  intensional  logic  when  attempti ng 
to  model  notions  of  necessity  and  possibility  (a  modal  logic 
[Hughes  and  Cresswell  72])  or  obligation  (a  deontic  logic  [Lemmon 
65])  or  when  dealing  with  knowledge  and  belief  as  part  of  the 
world  to  be  modelled  (as  in  [Hintikka  62])  *  Moreover »  given  the 
dynamic  nature  of  most  domains  of  interest  to  A I f  perhaps  a 

temporal  logic  (e*g*  [Prior  67])  or  a  logic  of  actions  (e«g 
[Pratt  76])  is  a  more  suitable  candidate  for  L'* 

The  main  reason  for  using  FOPC  as  the  world  language  is  that 
most  systems  represent  knowledge  about  the  world  in  an 
essentially  first  order  manner*  A  casual  glance  through 

[ Brachman  and  Smith  80]  will  reveal  that  many  groups  use  a  scheme 
based  on  FOPC  itself*  While  other  groups  use  much  additional 
machineryf  it  is  usually  not  of  a  semantic  nature  and  the 
descriptive  power  remains  the  same*  I  include  in  this  category 

provision  for  procedural  components  (as  in  PROLOG  [Kowalski  74]) 

or  for  a  network  style  organization  (as  in  the  semantic  networks 
of  [Hendrix  75]»  [Schubert  76]  or  [Shapiro  79])*  Interestingly 
enoughy  some  of  the  research  in  domains  of  knowledge  and  belief 
(e*g*  [Moore  80])  or  in  the  relationship  between  concepts  and 
objects  (e*g*  [McCarthy  79])  has  been  done  in  a  first  order 
framework  even  though  it  could  be  argued  that  these  areas  require 
a  more  expressive  representation  language*  Without  advocating 
obtuse  encodings  into  FOPCy  it  can  nonetheless  be  stated  that  the 
restrictions  of  this  language  do  not  seriously  compromise  the 
expressive  power  needed  by  most  projects*  This  still  allows  the 
possibility  of  eventually  considering  more  general  languages 
while  also  providing  the  necessary  foundations* 

2.2  THE  INTERACTION  WITH  KNOWLEDGE  BASES 

The  motivating  question  of  the  preceding  section  was  the 
fo llowing : 

What  is  a  knowledge  base  and  in  what  sense  can  it  be 

said  to  know  something? 

In  this  section,  I  will  consider  an  equally  valid  and  perhaps 
more  revealing  approach  to  this  question*  The  idea  is  not  to 
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*treat  a  KB  as  an  independent  unit  but  as  a  component  of  a 
knowledge-based  system  whose  purpose  is  to  provide  and  maintain  a 
model  of  the  application  domain*  A  KB  is  now  understood  in  terms 
of  its  functionality,  in  particular,  in  terms  of  its  interactions 
with  the  system® 

A  KB  is  anything  that  can  be  asked  questions  (and  told 
factsl  about  some  domain*  What  a  KB  knows  is 
determined  by  the  answers  it  provides  to  questions* 

In  this  section,  I  will  examine  what  it  should  be  possible  to  ask 
or  tell  a  KB®  The  discussion  will  be  loosely  structured  around  a 
set  of  examples  in  English*(l] 

2*2*1  Questions 

As  noted  above,  a  KB  can  be  characterized  in  terms  of  the 
answers  it  provides  to  questions  from  its  user  (man  or  machine)* 
To  allow  for  incompleteness,  we  have  to  admit  that  a  question 
such  as 


Is  John  a  teacher? 

may  be  answered  "yes'S  "no"  or  "unknown"*  In  fact,  we  can  say 
that  the  sentence 

John  is  a  teacher* 


is  known 
"yes" •  £  2  ] 
when  some 


precisely  when  its  interrogative  form  is  answered 
Similarly,  we  can  say  that  a  KB  is  incomplete  exactly 
question  of  interest  is  answered  "unknown"* 


Even  though  a  KB  is  incomplete, 
certain  areas*  For  example,  suppose 


there  may  be  completeness  in 
that  the  KB  knows  that 


£  1  3  Obviously  I  am  not  assuming  any  sort  of  natural  language 
abilities*  Nor  am  I  assuming  that  a  KB  will  volunteer 
information  to  avoid  misleading  its  user  (in  the  sense  of  (Joshi 
and  Kaplan  78])*  In  particular,  it  is  not  the  role  of  the  KB  to 
determine  the  purpose  of  an  interaction  based  on  a  model  of  the 
user  (as  in  [Perrault  et  al .  78])*  The  KB  is  taken  to  be  the 
bottom  end  of  a  system  that  might  exhibit  this  kind  of 
intelligent  behaviour* 

[2]  As  before,  the  term  "known"  here  is  to  be  understood,  unless 
otherwise  specified,  as  "known  to  be  true"  as  opposed  to  "known 
to  be  false"  when  the  question  is  answered  "no"* 
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John  and  Bill  are  the  only  teachers* 

In  this  case,  not  only  does  the  KB  know  that  John  and  Bill  are 
teachers,  it  also  knows  that  there  are  no  others*  It  therefore 
has  a  complete  picture  of  the  teachers*  On  the  other  handy  the 
KB  may  simply  know  that 

John  or  Bill  is  a  teacher* 

In  this  situation,  the  KB  knows  that  there  is  a  teacher  but  does 
not  know  who  and  so  does  not  have  a  complete  list  of  teachers* 
There  is,  noreover,  a  third  possibility  which  is  that  it  cannot 
be  determined  from  what  is  available  in  the  KB  whether  or  not  it 
has  complete  knowledge  of  the  teachers*  For  example,  suppose 
that  the  only  thing  the  KB  knows  about  the  teachers  is  that  John 
is  one  of  them*  In  this  case,  the  answer  to  the  question 

Is  there  a  teacher  apart  from  John? 

will  be  "unknown"*  So  the  KB  is  definitely  incomplete*  On  the 
other  handy  unlike  the  two  previous  cases,  we  cannot  say  for  sure 
whether  or  not  the  KB  has  a  complete  list  of  teachers*  There  may 
Just  be  John  or  there  may  be  others  as  well*  In  other  words,  the 
KB  may  or  may  not  already  know  all  of  the  teachers*  So  Just  as 
the  question 


Is  John  a  teacher? 

may  be  answered  "yes",  "no"  or  "unknown",  the  question  that  asks 
the  KB  if  it  is  missing  any  teachers  may  also  be  "yes'1,  "no"  or 
"unknown"  depending  only  on  what  is  in  the  KB* 

If  the  purpose  of  a  query  language  is  to  provide  an  accurate 
picture  of  what  is  and  is  not  available  in  the  KB,  we  should  be 
able  to  formulate  questions  that  ask  the  KB  about  its 
incompleteness*  The  question 

Is  there  a  teacher  other  than  John? 

obviously  does  not  suffice  since  it  only  asks  if  there  is  a 
teacher  other  than  John  without  telling  us  whether  all  the 
teachers  are  known*  What  is  really  required  is  the  question 

Is  there  a  teacher  other  than  nl ,  n2,  n3  •  ••  ? 
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where  the  n® s  are  names  of  all  the  known  t eachers « [ 3 ] 

There  are  a  couple  of  problems  with  this  method  of  asking  if 
all  the  teachers  are  known*  First  of  ally  there  could  be  a  very 
large  number  of  known  teachers*  In  some  applications  and  for 
some  classes;  there  may  even  be  an  infinite  number*  Secondly;  we 
have  to  know  what  these  names  are  in  the  first  place  to  be  able 
to  formulate  the  question*  For  a  large  and  complex  KB*  it  could 
happen  that  only  the  KB  has  this  information*  One  can  also 
imagine  situations  where  the  KB  will  not  divulge  this  information 
for  security  reasons  while  still  being  willing  and  able  to  answer 
questions  about  its  incompleteness* 

This  suggests  that  the  KB  itself  should  keep  track  of  its 
incompleteness  in  the  same  way  it  maintains  knowledge  of  the 
application  area*  It  is  worth  considering  at  least  one 
inadequate  method  of  allowing  a  KB  to  keep  track  of  its 
incompleteness*  The  idea  is  simply  to  have  a  class  like 
"teacher"  called  "k-teacher"  with  the  intended  interpretation 
that  k-teachers  are  known  teachers*  So*  for  example;  we  could 
have  a  KB  that  knows  that 

Either  John  or  Bill  is  a  teacher* 

John  is  not  a  k— teacher* 

Bill  is  not  a  k-=teacher* 

To  ask  if  the  the  KB  has  an  incomplete  list  of  teachers;  we  ask 
Is  there  a  teacher  apart  from  the  k— teachers? 
and  are  correctly  answered  "yes" • 

The  trouble  with  this  approach  is  the  management  of  that 
extra  class*  There  is  a  very  definite  relationship  between  the 
teachers  and  the  k” teachers  that  must  be  captured  somehow*  In 
particular;  since  we  want  the  k-=teachers  to  be  the  known 
teachers;  whenever 

n  is  a  teacher* 


[3]  These  are  the  n's  such  that 
"yes"  • 


ii 


Is  n 


a 


teacher?" 


J.S 


answered 
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is  known  t 

n  is  a  k— teacher* 

should  be  known  as  well*  This  suggests  that  the  KB  should  know 
"that 

Every  teacher  is  a  k— teacher* 

However»  this  does  not  work  sincef  for  the  above  KBt  it  Implies 
that 


Either  John  or  Bill  is  a  k— teacher* 

which  contradicts  what  is  already  known*  The  trouble  is  that  the 
relationship  between  teachers  and  k— teachers  depends  on  the 
current  state  of  the  KB  so  "k— teacher"  cannot  be  a  simple 
property  of  individuals  like  "teacher"* 

The  solution!  then*  is  to  leave  the  KB  as  is  but  to  allow 
questions  that  refer  to  the  current  state  of  knowledge  of  the  KB* 

For  example!  to  find  out  if  the  KB  has  a  incomplete  list  of 

teachers*  we  ask 

Is  there  a  teacher  other  than  the  known  teachers? 

which  will  be  answered  "yes"  when  the  KB  knows  it  has  an 

incomplete  list  of  teachers*  "no"  when  the  KB  knows  it  has  a 
complete  list  of  teachers*  and  "unknown"  when  it  cannot  determine 
whether  or  not  its  list  is  incomplete* 

To  exhibit  these  capabilities*  a  KB  must  be  able  to 

distinguish  clearly  between  what  is  t  rue  in  the  application 
domain  and  what  is  know n  about  that  domain*  For  example*  if  the 
KB  only  knows  that 

George  is  a  teacher* 

Either  John  or  Bill  is  a  teacher* 

the  difference*  from  the  perspective  of  the  KB,  is  between 

the  teachers!  George*  one  cf  John  or  Bill*  and  maybe  others* 
the  known  teachers!  George  only* 
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In  fact(  the  above  question  really  just  asks  If  these  two  sets 
are  distinct. 

Once  questions  are  allowed  to  refer  to  the  state  oi  the  KB 
as  well  as  to  the  state  of  the  world*  the  expressive  power  is 
extended  considerably®  For  example*  while  the  question 

Is  there  a  teacher? 

asks  the  KB  about  the  existence  of  a  teacher*  the  question 
Is  there  a  known  teacher? 

asks  the  the  KB  if  It  knows  who  any  of  them  are®  Similarly*  we 
can  distinguish  between  the  following  three  questions: 

A®  Does  any  student  live  in  Montreal? 

B®  Is  there  a  student  among  the  known  citizens  of  Montreal? 

C •  Is  anyone  known  to  be  a  student  living  in  Montreal? 

The  differences  among  these  become  clear  when  we  consider  KBs 
with  differing  amounts  of  knowledge  about  the  students  living  in 
Montreal • 

KB1 :  Mary  and  Joan  are  students® 

One  of  them  lives  in  Montreal® 

KB2:  Mary  or  Joan  is  a  student® 

Both  of  them  live  in  Montreal® 

KB3:  Mary  and  Joan  are  students  living  in  Montreal® 


Questions 

KB1 

KB2 

KB  3 

A 

yes 

yes 

yes 

B 

no 

yes 

yes 

C 

no 

no 

yes 

Of  course, 

this  does 

not 

exhaust  all 

the  possibilities  since 

it 

does  not 

c  onsi der 

the 

"unknown” 

answers  to  questions® 

For 

example*  if  we  have 

KB4:  Mary  lives  in  Montreal® 

Either  Joan  or  Sue  is  a  student  living  in  Montreal® 

then  the  questions  A,  B  and  C  are  answered  "yes'**  "unknown”  and 
"no",  respectively.  So  by  allowing  "know"  as  part  of  the  query 
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language t  fine  distinctions  can  be  made  anong  incomplete  KBs# 


2#2«2  Statements 

In  this  subsection*  I  will  consider  what  a  KB  can  be 
expected  to  be  told*  The  idea  is  that  a  KB  starts  o ff  with  no 
world  knowledge  but  accumulates  information  by  being  told  about 
the  domain  at  various  stages#  The  obvious  intent  is  that  after 
being  told  that  something  is  true ,  a  KB  should  know  it  (i#e* 
answer  "yes"  to  the  corresponding  questiom)# 

An  obvious  requirement  on  the  statement  language  is  that  it 
should  allow  incomplete  KBs  to  be  specified*  In  other  words*  the 
language  should  allow  statements  that  are  sufficiently  weak  to 
permit  incompleteness#  Examples  are  sentences  such  as 

Either  John  or  Bill  is  a  teacher# 

Some  student  lives  in  Montreal. 

Paul  is  not  a  teacher* 

and  Every  teacher  in  Bonfield  is  unmarried* 

The  understanding  here  is  that  the  KB  is  not  being  told  which  of 
John  or  Bill  is  the  teacher*  which  student  lives  in  Montreal, 
what  Paul's  occupation  is  and  who  the  teachers  in  Bonfield  are# 
Of  course,  the  "non— logical"  obj ect—c enter ed  representation 
schemes! 1]  are  notoriously  inadequate  in  this  regard  and, 
consequently,  only  deal  with  minor  forms  of  incompleteness,  if  at 
all#  The  "logical"  approach  may  also  have  difficulty  with  the 
last  statement  above  when  quantified  sentences  are  reserved  for 
integrity  constraints,  which  is  clearly  not  the  proper 
interpretation  here# 

Given  a  suitably  general  form  of  incompleteness,  we  want 
statements  that  can  refer  to  the  state  of  the  KB  the  same  way 
questions  can  and  for  analogous  reasons*  For  example,  a  KB  that 
only  knows  that  John  is  a  teacher  will  answer  "unknown"  to  the 


C 1]  By  these  I  mean  the  procedural  ones  (like  PLANNER  (Hewitt 
72]),  the  networks  not  based  on  FOPC  (like  KL— ONE  [Brachman  76] 
or  PSN  [Levesque  and  Mylopoulos  79])  and  the  frame-based  schemes 
(like  FRL  [Roberts  and  Goldstein  77]  or  KRL  [ Bobrow  and  Winograd 
77])  . 
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question 

Are  there  any  teachers  apart  from  the  known  ones? 

Since  this  is  something  the  KB  does  not  knew v  we  should  be  able 
to  tell  the  KB  whether  or  not  It  is  true  by  asserting  either 

The  only  teachers  are  the  known  teachers* 

or 

There  is  a  teacher  apart  from  the  known  teachers* 

effectively  telling  it*  in  this  case;  whether  or  not  John  and 
Bill  are  the  only  teachers*  The  first  of  these  is  a  special  case 
of  the  c losed  wo  rid  assumption  (GWA}»  which  as  Reiter  notes  in 
[Reiter  78b] »  cannot  be  used  in  general  for  incomplete  KBs*  By 
allowing  the  statement  language  to  refer  to  the  state  of  the  KB* 
the  assumption  can  be  used  selectively  when  it  is  appropriate* 

If  the  consistency  assumption  of  the  previous  section  is  to 
be  maintained;  an  obvious  requirement  is  that  a  KB  cannot  be  told 
something  that  it  already  knows  to  be  false*  Suppose;  for 
example *  that  a  KB  knows  that 

A*  Exactly  one  of  John  or  Bill  is  a  teacher* 

but  not  which*  The  answer  to  the  question 

Are  all  the  teachers  known? 

is  "no”.  Consequently*  the  KB  cannot  be  told  “that 

B*  The  only  teachers  are  the  known  teachers* 

which  is  the  CWA  for  teachers*  This  raises  an  interesting 
question:  in  what  sense  are  A  and  B  together  inconsistent?  In 

particular*  if  we  replace  A  by  A* 

A**  John  is  a  teacher  and  Bill  is  not* 

the  resulting  KB  can  be  told  that  B  is  true*  In  other  words  A* 
and  B  are  consistent  even  though  A*  implies  A* 

This  suggests  that  perhaps  A  and  B  are  not  inconsistent  and 
that  the  KB  that  knows  A  can  be  told  B  provided  we  split  the  KB 
into  two  components:  one  that  knows  A*  and  the  other  that  knows 
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In 


its  converse  ( where  Bill 
suggests  a  more  basic  issue 
ol  being  told  some 
above) y  the  question 
sense  of  any  meta-statement 


is  the  teacher) [ 1 ]. 

Given  that  a  KB  should  be 
(such  as  the  CWA  for 
not  it  should  be  able 


meta-statemen ts 
is  whether  or 


facty  it 
capab  le 
t  eachers 
to  make 


Consider!  for  example^  a  statement  of  the  form 

1*  Either  John  or  Bill  is  known  to  be  a  teacher. 

It  is  difficult  to  see  exactly  what  a  KB  should  be  expected  to  do 
with  this.  The  problem  is  that  if  this  is  added  to  a  KB f  in  the 
resulting  KB ,  (1)  must  be  known  to  be  true.  Thust  the  KB  will 

either  have  to  know  that  John  is  a  teacher  or  know  that  Bill  is  a 
teacher  and  yet  (1)  does  not  specify  which.  This  is  quite 
different  from  an  addition  of 


2.  Either  John  or  Bill  is  a  teacher. 

where,  in  the  resulting  KB»  neither  John  nor  Bill  is  known  to  be 
a  teacher.  However,  (1)  suffers  from  ambiguity  since  it  forces 
the  KB  to  know  which  of  John  or  Bill  is  the  teacher  without 
telling  it  which.  It  is  therefore  problematical  in  exactly  the 
same  way  that  an  addition  of 


or 


Someone  is  known  to  live  in  Montreal* 


It  is  not  known  that  Bill  lives  in  Montreal. 


would  be.  In  a  nutshell,  we  cannot  expect  to  tell  a  KB  just  any 
meaningful  meta-sentence.  I  say  "meaningful"  here  because  it 
certainly  does  make  sense  to  ask  if  these  sentences  are  true. 

This  problem  is  worth  examining  in  further  detail.  The  fact 
is  thaty  no  matter  how  convoluted  the  KB  is  (in  terms  of  contexts 
[ Suss man  and  McDe  rmot  t  72  J  y  [ Brae  hman  76  ]  ,  [ Schneider  79  ]  , 
partitions  [Hendrix  75]t  spaces  [Cohen  78 ] ) y  there  is  one  (and 


[1]  This,  I  take,  is  what  happens  in  the  non-raon tonic  logics  of 
[McDermott  and  Doyle  78]  and  [Reiter  80]  where  the  two  pieces  of 
the  KB  are  called  ’’fixed  points"  and  "extensions",  respectively. 
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only  one)  KB©  Consequently,  any  addition  to  the  KB  must  specify 
unambiguously  the  resulting  updated  KB®  The  problem  with  a 
statement  like  (1)  is  that  there  is  more  than  one  candidate  for 
the  updated  KB  and  absolutely  no  reason  for  preferring  one  over 
the  other:  in  one,  Bill  is  known  to  be  a  teacher  1  in  another, 
John;  in  a  third,  perhaps,  both©  Now  Just  splitting  the  KB  into 
three  parts,  one  where  Bill  is  a  known  teacher,  one  where  John  is 
and  a  third  where  they  both  are,  does  not  work  since,  in  the 
resulting  KB ,  ne ither  Bill  nor  John  is  known  to  be  a  teacher  and, 
consequently,  (1)  is  not  known  to  be  true®  All  that  can  be  said 
is  that,  for  example,  in  one  "space11,  Bill  is  a  teacher©  Even  if 
we  have  some  way  of  stating  that  one  of  these  "spaces"  is  the 
"correct"  KB,  in  the  resulting  overall  KB,  we  still  do  not  have 
that  one  of  Bill  or  John  is  known  to  be  a  teacher®  So,  the 
addition  of  (11  has  not  been  successful  and  at  best  we  have 
something  resembling  the  addition  of  (2)© 

Incidentally,  this  argument  against  the  partitioning  of  a  KB 
into  multiple  KBs  must  be  contrasted  with  the  similar  views 
expressed  by  Moore  (Moore  75] »  [Moore  80]®  In  his  case,  the 
argument  is  against  the  use  of  multiple  KBs  as  a  representation 
of  disjunction  and  is  based  on  efficiency  considerations  and  how 
this  use  leads  to  a  combinatorial  explosion©  In  my  example 
above,  the  difficulty  is  purely  conceptual© 

So  while  the  statement  language  shares  some  obvious 
similarities  with  the  query  language,  there  are  nonetheless 
differences  in  what  constitutes  acceptable  usage  that  the  theory 
I  am  proposing  will  have  to  explain©  Without  attempting  to 
resolve  the  inherent  ambiguity  of  an  assertion  like  (1),  the 
theory  must  at  least  account  for  why  such  an  assertion  would  be 
anomalous • 


2.3  SUMMARY 

In  this  chapter,  I  have  examined  the  concept  of  a  knowledge 
base  from  two  distinct  points  of  view®  First  of  all,  I  argued 
that  the  knowledge  in  a  knowledge  base  was  best  understood  in 
terms  of  a  language  for  talking  about  worlds©  In  this  sense,  a 
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knowledge  base  is  an  interpretation  of  the  sentences  of  the 
language  as  known  or  unknown*  subject  to  the  constraints  of 
consistency*  competence  and  closure. 

The  second  view  of  knowledge  bases  treats  them  as  components 
of  systems  that  can  be  told  or  asked  various  things  about  the 
application  domain.  In  this  case*  the  knowledge  is  determined  by 
the  answers  provided  to  questions.  I  also  argued  that  the 
incompleteness  of  knowledge  bases  places  certain  requirements  on 
the  language  of  interaction*  Specifically,  both  questions  and 
statements  should  be  able  to  refer  to  the  state  of  the  knowledge 
base  as  well  as  to  the  world. 

These  issues  will  be  taken  up  formally  in  the  remaining 


chapters 


CHAPTER  3 

A  PROPOSITIONAL  KNOWLEDGE  LANGUAGE 


3*1  The  propositional  language 

3®  1*1  Complete  World  Descriptions 
3*1*2  Truth  Value  Gaps 
3*2  Incomplete  knowledge 

3*2*1  Partial  World  Descriptions 
3*2*2  Truth  Tables 
3*2*3  Model  Descriptions 
3*2*4  Knowledge  Values 
3*2*5  Inconsistent  Knowledge 
3*3  The  Knowledge  Language 
3*3*1  The  language  KPL 
3*3*2  Axiomatization  of  KPL 
3*3*3  Some  Meta-Theo rents 
3*3*4  Semantics  of  KPL 
3*4  Comparison  with  Other  Approaches 
3*4*1  The  Me ta- Language  of  PL 
3*4*2  Modal  Logic 


As  was  discussed  earlier  In  chapter  two ,  my  approach  to 
incomplete  knowledge  involves  treating  a  knowledge  base  as  a 
partial  description  of  a  world  with  respect  to  a  language*  In 
this  chapter,  I  will  consider  partial  descriptions  of  worlds  with 
respect  to  the  simple  language  of  the  propositional  calculus,  PL* 
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Many  of  the  results  of  the  next  chapter,  dealing  with  the 
predicate  calculus,  can  be  motivated  (and  are  best  understood)  in 
this  simpler  framework*  The  ideas  in  this  chapter  are  based  on 
[Levesque  79]  although  the  approach  is  somewhat  different  to 
anticipate  the  results  of  the  next  chapter* 

In  the  first  section,  the  notion  of  a  complete  propositional 
world  description  is  introduced*  In  section  two,  these  are 
generalized  to  partial  world  descriptions  and  if  is  shown  how 
these  cannot  be  accounted  for  in  terms  of  truth  tables,  but  can 
be  understood  as  certain  sets  (called  maximal)  of  complete  world 
descriptions*  In  section  three,  the  language  KPL,  which  can 
refer  directly  to  what  is  known,  is  defined  semantically  and 
proof- theoretically «  Finally,  the  last  section  compares  my 
approach  to  that  of  modal  logic  and  a  formalization  of  the 
me ta— 1 anguag e  of  PL*  Included  in  that  section  is  a  proof  that 
for  KPL,  meta-knowledge  reduces  to  world  knowledge* 

3.1  THE  PROPOSITIONAL  LANGUAGE 

By  a  propositional  language,  I  mean  a  language  that  is 
formed  from  some  countable  set  of  primitive  sentences  using  the 
connectives  of  negation  and  material  implication* 

Let  PRIM  be  a  countable  set  of  primitive  sentences 
Def n  The  propositional  language  PL  is  the  least  set  satisfying: 

1*  PRIM  £  PL 

2*  If  at,  p  €  PL,  then  -»a,  ( at=>p )  e  PL* 

where  the  characters  1  -» 1  and  '=3*  stand  for  negation  and  material 
implication  respectively*  As  usual,  the  connectives  of 

disjunction,  conjunction  and  material  equivalence  can  be 
introduced  as  syntactic  abbreviations. 

(atvp)  for  (ia3p)  ,  (at*p)  for  -» ( -nav-»p)  and 


Notation 


(at=p)  for  (  (  a^p  )  a  (  p=>at )  )  • 
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3*1*1  Complete  World  Descriptions 

Before  considering  partial  descriptions  of  a  world  with 
respect  to  PL*  we  should  be  clear  as  to  what  is  meant  by  a 
complete  description  of  a  world*  By  a  complete  description*  I 
mean  an  interpretation  of  the  sentences  of  the  language  as  either 
true  or  false*  We  can  think  of  a  complete  description  as  a 
function  from  the  sentences  of  the  language  to  either  T  (truth) 
or  F  (falsity)  subject  to  certain  constraints  on  how  and  3  are 
to  be  interpreted*  I  will  call  such  a  function  a  propositional 
assi gnment  t 

Def n  An  element  d  of  [PL  -*  (T*F}  3  is  a  proposi tional  assignment 

iff 

1®  d(-«a)  =  T  (F)  iff  d la,)  -  F  (Tj  . 

2*  d(a^p)  =  F  iff  dial  =  T  and  dtp)  =  F. 

3*  If  d(a)  and  d(a=>p)  =  T*  then  dip)  —  T* 

A  complete  description  of  a  world  with  respect  to  PL  is  any 
propositional  assignment  to  the  sentences  of  PL*  However*  by  a 
trivial  induction  argument*  any  propositional  assignment  is 
determined  uniquely  by  the  assignment  it  makes  to  the  sentences 
of  PRIM*[1]  We  can*  therefore*  think  of  any  assignment  to  the 
sentences  of  PRIM  as  a  complete  world  description  provided  we  say 
how  to  interpret  the  non-prirai tive  sentences* 

Defn  WD  =  [PRIM  (T»F)3*  the  (complete)  world  descriptions* 

The  unique  propositional  assignment  compatible  with  a  world 
description  can  be  specified  using  an  interpretation  function  II 

Defn  I  e  [ PL  x  WD  -  {T  *  F)  ]  is  defined  by 
1*  I ( a  * s )  =  s (a)  when  a  e  PRIM 

2.  I(-.a*s)  =  T  if  I  ( a  *  s)  =  F 

=  F  if  I ( a  *  s )  =  T 

3.  I((ar=>p)»s)  =  T  if  I(a*s)  =  F  or  I(p*s)  =  T 

=  F  if  I(a*s)  =  T  and  I(p* s)  =  F 


[1]  This  is  true  even  without  the  redundancies  present  in  the 
above  definition*  These  are  introduced  only  to  anticipate  the 
more  general  definition  of  an  assignment  where  more  than  two 
truth  values  are  used* 
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An  important  property  of  this  definition  of  I  is  that  it  is 
extensionai  in  that  the  assignment  to  a  sentence  is  completely 
determined  by  the  assignment  to  its  component  sentences* 

Property :  Extensionali ty  of  I 

If  I(al,si)  =  I(a2ys)  and  I(pl,s)  =  I(g2,s)  then 
!•  I  (ial  t  s)  =  I(-*a2t  s) 

2*  I  (  {  at  1  sp  1  )  ,  s  )  =  I  (  (  a2=>p2  )  »  s  ) 

In  other  wordSy  we  have  a  truth  table  for  the  connectives  -*  and  => 
with  respect  to  the  two  truth  values  T  and  F*  Except  for 
terminology,  perhaps,  all  of  this  is  fairly  standard* 


3*1*2  Truth  Value  Gaps 

One  interesting  extension  to  the  above  definition  might  be 
to  allow  I  to  be  a  partial  function  from  sentences  of  PL  to  truth 
values*  The  issue,  here,  is  whether  or  not  there  are  truth  value 
gaps  [ VanFrassen  66 ] y  that  is,  sentences  that  are  assigned 
neither  true  nor  false*  In  our  case,  these  could  only  arise  if 
world  descriptions  could  also  be  partial  functions*  Now  it  might 
seem  strange  to  want  partial  assignments  to  the  primitive 
sentences  when  we  are  trying  to  deal  with  complete  descriptions, 
but  it  can  also  be  argued  that  a  complete  description  of  a  world 
should  also  tell  us  which  sentences  of  PL  cannot  be  assigned  a 
truth  value  because  they  are  in  some  way  inappropriate  to  the 
world  in  question*  To  use  a  classic  example,  if  one  of  the 
primitive  sentences  is 

The  current  king  of  France  is  bald* 

we  might  want  to  say  that  a  complete  description  of  a  world  where 
France  is  a  republic  should  indicate  that  this  sentence  is 
neither  true  nor  false.  Note  that  the  inability  (or 
undesirability)  of  assigning  this  sentence  a  truth  value  in  no 
way  compromises  the  completeness  of  the  world  description* 

Cne  way  truth  value  gaps  can  be  accomodated  easily  is  to 
allow  a  third  truth  value  corresponding  to  the  gap  and  redefining 
world  descriptions  appropriately  as  in 


Page  3—5 


Defn  WD*  =  [PRIM  {T*F,*}]  total  functions  to  T,  F  or  *  (gap). 

Given  this  extension*  however*  we  still  have  to  make  sure  that 
the  sentences  are  assigned  values  consistent  with  the  desired 
interpretation  of  and  For  example*  the  obvious  extension  to 

I  provides  one  set  of  propositional  assignments  (now  generalized 
to  allow  for  the  third  truth  value) l 

Defn  I*  c  [PL  x  WD*  -  (T»F**}J  is  defined  by 

1®  I*(a*s)  =  s(«)  when  a  e  PRIM 

2«  I*(^a*s)  ~  T  if  I*  (a*  s )  =  F 

-  F  if  I*(a»s)  -  T 

=  *  otherwise 

3.  I*({a3p),s)  =  T  if  I*(a,s)  =  F  or  I*(>3,s)  =  T 

=  F  if  I*(a,s)  =  T  and  I*(p,s)  =  F 
=  *  otherwise 

This  interpretation  of  sentences  specifies  a  truth— table 
consistent  with  the  one  proposed  in  ( Eleene  52]*  A  slightly 
different  interpretation  also  results  in  propositional 

assignments : 

3  ®  1 1  (  { ac=>p)  *  s  )  =  *  if  Is  (  a  *  s )  =  *  or  I'  (p*s)  =  * 

=  F  if  I '  ( a  *  s)  =  T  and  I'(p»s)  =  F 

=  T  otherwise 

This  leads  to  an  interpretation  where  a  sentence  has  no  truth 
value  (i*e*  has  the  *  value)  whenever  one  or  more  of  its 
component  sentences  has  no  truth  value*  ,  The  point  of  all  of  this 
is  not  to  focus  on  truth  value  gaps  but  rather  to  indicate  that 
there  is  more  than  one  reasonable  way  to  interpret  sentences  when 

dealing  with  more  than  Just  T  and  F*  For  the  sake  of  expediency* 

however*  I  will  ignore  truth  value  gaps  in  world  descriptions* 

3.2  INCOMPLETE  KNOWLEDGE 

Having  discussed  complete  descriptions  of  a  world*  we  are 
now  in  a  position  to  examine  incomplete  knowledge  in  terms  of 
partial  descriptions  of  a  world  with  respect  to  PL*  The  idea 
here  is  that  a  partial  description  of  a  world  will  only  assign 
true  or  false  to  some  of  the  sentences  of  the  language*  Some 
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sentences  will  remain  unassigned  not  because  they  are 
inappropriate  to  the  world  in  question  (as  with  truth  value 
gaps) ,  but  because  it  is  not  yet  known  whether  true  or  false 
should  be  assigned*  So  there  are  three  distinct  values  that  can 
be  assigned  to  a  sentence:  T  (if  the  sentence  is  known  to  be 
true),  F  (if  the  sentence  is  known  to  be  false)  and  ?  (if  the 
sentence  is  not  known  to  be  either  true  or  false)* 

3*2*1  Partial  World  Descriptions 


The  major  requirement  that  will  constrain  the  assignments 
representing  partial  world  descriptions  is  that,  no  matter  what 
is  known  about  the  world,  the  interpretation  rules  of  the 
language  PL  are  known*  This  has  two  important  consequences* 
First  of  all,  an  assignment  should  be  a  propositional  assignment 
(in  terms  of  T  and  F)*  For  example,  if  a  sentence  is  known  to  be 
true,  then  its  negation  must  be  known  to  be  false*  Stated 
otherwise,  if  the  world  being  partially  described  is  such  that  a 
sentence  must  be  true  of  it,  then  the  description  also  specifies 
(at  least  implicitly)  that  the  negation  of  the  sentence  must  be 
false • 


The  second 
a  value  solely 
reference  to  the 
assigned  this 
every  world,  the 
doubt  its  vera 
knowledge  about 
language  used  to 


conseque 
on  the  b 
world  i 
value  • 
n  even  a 
c  i  ty  • 
the  wo 
de  scrib 


nee  is  that  if  a 
asis  of  the  rules 
n  question,  then 
In  other  words, 
partial  descript 
What  is  subject 
rid  and  not  th 
e  the  world* 


sentence  can  be  assigned 
of  the  language  without 
the  sentence  must  be 
if  a  sentence  is  true  in 
ion  of  a  world  cannot 
to  incompleteness  is  the 
e  knowledge  about  the 


Def n  A  propositional  assignment  is  reali s t ic  iff  it  assigns  T  to 
every  tautology* 


Just  as  we  identified  complete  descriptions  with  propositional 
assignments,  partial  world  descriptions  are  realistic 
assignments*  Notice  that  any  propositional  assignment  that  does 
not  assign  ?  to  any  sentence  is  among  the  realistic  assignments* 
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The  question  that  now  arises  is  what  kind  of  interpretation 
function  will  have  the  property  of  producing  all  and  only 
realistic  assign  men  ts «  In  the  next  section  I  will  show  that  an 
extensional  interpretation  function  (that  is*  one  based  on  a 
truth  table)  cannot  have  this  property©  The  only  reason  the 
truth  table  method  is  worth  looking  at  is  because  it  has  been 
used  so  often  in  the  literature  C  see«  for  example?  [Belnap  77]? 
[Shapiro  and  Bechtel,  76]  and  [Cohen  78])® 


3©2©2  Truth  Tables 

Suppose  we  are  dealing  with  an  extended  notion  of  world 
description  and  an  extended  version  of  I  that  is  truth  table 
based  but  ranging  over  T?  F  and  ?*  The  idea  is  that  for  any 
realistic  assignment?  there  should  be  a  world  description  such 
that  the  function  I  produces  that  assignment©  However?  this  is 
impossible  when  I  is  truth  table  based® 


Consider  the  assignment  r  defined  by 


r  ( a  )  =  T 


=  F 
=  ? 


if  a  is  a  tautology 
if  is  a  tautology 

otherwise 


This  assignment  is  obviously  propositional  and?  therefore? 
realistic®  Now  suppose  there  was  a  world  description  s  such  that 

lCa?s)  =  rta)  for  every  a® 


Choose  any  two  primitive  sentences  p  and  q  such  that 
I(p?s)  =  I ( q  ?  3 )  . 


Since  I  is  extensional?  we  have  that 
I  ( pap ?  s )  =  I(p=>q?s)« 

However?  this  leads  to  a  contradiction  since 

I(p=p?s)  =  r(pop)  =  T 
and  I(poq?s)  =  r(p=q)  =  ?• 

So  an  assumption  that  (pop)  and  (  po-j)  are  assigned  the  same  truth 
value  must  be  incorrect  and  the  function  I  cannot  be  based  on  a 
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truth  tablet 

The  interesting  point  about  the  above  argument  is  that  it 
applies  to  any  finite  set  of  truth  values,  any  subset  of  which  is 
to  be  thought  of  as  corresponding  to  truth*  The  only  requirement 
is  that  there  be  some  world  description  where  only  the 

tautologies  are  assigned  one  of  the  true  values*  The  reason  for 

the  failure  of  the  truth  table  approach  is  simply  that  what  is 
known  about  a  composite  sentence  is  not  merely  a  function  of  what 
is  known  about  the  components*  The  sentence  (pop)  is  known  to  be 

true  because  it  is  known  that  there  is  no  way  it  can  be  false  by 

virtue  of  the  interpre tation  rules  for  PL*  Consequently,  the 
assignment  to  (p=>p)  cannot  be  based  on  the  assignment  to  p  and, 
therefore,  the  truth  table  method  must  be  rejected* 

One  possible  modification  to  the  truth  table  method  proposed 
by  [Bruce  73]  and  used  in  [Vassiliou  80]  looks  more  promising* 
The  idea  here  is  to  use  a  truth  table  but  first  to  consider  all 
tautologies  separately* 

Defn  WD  =  [PRIM  -  (T,F,?) ] 

Defn  1+  e  [PL  x  WD  -  (T , F , ?} ]  is  defined  by 
1*  I+(a,s)  =  T  if  a  is  a  tautology 
2*  I  +  (cr,s)  =  s(a)  when  a  e  PRI+M 
3*  I+(-»a,s)  —  T  if  I  +  (a,s)  =  F 

=  F  if  1+  ( a  ,  s )  =  T 

=  ?  otherwise  (^a  is  not  a  -tautology) 

4*  I+( (asp) js)  =  T  if  I+(a,s)  =  F  or  I+(pts)  =  T 

=  F  if  I  +  (cr,s)  =  T  and  I+(p,s)  =  F 

=  ?  otherwise  ( ( a=p )  is  not  a  tautology) 

It  is  easy  to  see  that  this  interpretation  function  results  in 
realistic  assignments  in  that  it  produces  propositional 
assignments  where  every  tautology  is  assigned  true  and  the 
negation  of  every  tautology  is  assigned  false*  However,  it  still 
fails  to  produce  all  the  realistic  assignments*  Consider  a  world 
partially  described  as  having  (p=q)  true*  In  other  words,  let  r 
be  the  following  realistic  function! 

r (a)  =  T  if  ((poq)=>a)  is  a  tautology 
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=  F  if  C(p3q|o-aa|  is  a  tautology 
=  ?  otherwises 

Again?  there  will  be  no  world  description  s  such  that 

X+(a»s)  =  rCa) 

since;  we  would  need 

X  +  (  P  s  Si)  =  I  +  (q»s)  =  ? 

and  I+Cp3q»s)  =  Ts 

which  is  clearly  impossible  given  the  definition  of  I+«  In  other 
words?  the  problem  with  providing  an  in terpretation  function  that 
produces  all  and  only  realistic  assignments  of  a  world  cannot  be 
solved  using  a  truth  table  even  if  special  provisions  are  made 
for  dealing  with  the  tautologies* 


3*2*3  Model  Descriptions 

This  leaves  us  with  the  problem  of  finding  an  adequate 

c 

interpretation  function  for  realistic  assignments  of  a  world  with 
respect  to  the  language  PL*  The  method  I  am  proposing  involves 
treating  realistic  assignments  as  sets  of  complete  descriptions* 
The  idea  here  is  that  a  realistic  assignment  of  a  world  can  be 
thought  of  as  applying  to  many  distinct  worlds*  Inherent  in  its 
partiality  is  the  fact  that  it  does  not  pick  out  a  unique  world 
but  only  a  range  of  worlds  satisfying  the  description* 
Corresponding  to  each  of  these  worlds  is  a  complete  world 
description  (i*e*  an  element  of  WD)  that  can  be  viewed  as  a 
completed  version  of  the  realistic  assignment*  So  for  every 
realistic  assignmenty  there  is  a  set  of  world  descriptions  that 
are  compatible  with  it  in  this  sense*  Now  all  that  has  to  be 
done  is  to  restrict  the  sets  of  complete  world  descriptions  so 
that  for  each  such  set  there  is  a  unique  corresponding  realistic 
assignment*  This  can  be  done  as  follows: 

Let  m  c  WDy  s  e  WD 

Defn  ra  covers  s  iff  for  every  sentence  a.  in  PL  there  is  an  s*  in 
m  such  that  Kata)  =  I(a?s')* 

Defn  ra  is  maxima 1  iff  m  contains  every  world  description  that  it 


Page  3—10 


covers* 


I  will  call  non-empty  maximal  sets  of  world  descriptions  model 
descriptions  since  they  will  deal  in  what  is  known  about  a  world 
in  a  model* 

Defn  MD  =  (  m  c  WD  I  m  is  non-empty  and  m  is  maximal] «  the  model 


descri p  ti on  s 

Given  this  definitions  we  can 
function  J  that  will  assign 
model  description* 

Defn  J  e  [PL  x  MD  -  (T,  F  *  ?}  ]  is 

J(afin)  =  T  if  every  s  e 

-  F  if  every  s  e 

—  ?  otherwise 


now  provide  an  interpretation 
T,  F  or  ?  to  every  sentence  and 

defined  by 
ra  has  I(  at T  s)  =  T 
m  has  1(0*9)  -  F 


Note  that  this  definition  relies  on  the  fact  that  the  model 
description  m  is  not  the  empty  set*  The  key  property  held  by 
this  definition  of  J  is  that  it  corresponds  exactly  to  realistic 
assignments  in  the  same  way  that  the  function  I  produces  all  and 
only  the  propositional  assignments* 


Let  R  be  the  set  of  realistic  assignments 
Theorem  There  is  a  bijection  C  e  [R  -*  MD  ]  such  that 

r  (  at )  =  J ( a , C ( r ) ) • 

In  the  rest  of  this  subsection*  I  will  prove  this  theorem*  Those 
less  interested  in  the  proof  may  want  to  skip  to  the  next 
subsec  ti on* 


Let  r  be  a  realistic  assignment  of  a  world 
s  be  any  element  of  WD 

Defn  s  is  compat ible  with  r  iff  for  every  sentence  a  in  PL 
If  r(at)  =  T  or  F  then  I(at,s)  =  r(a) 

Defn  C(r)  =  [  s  e  WD  J  s  is  compatible  with  r) 

Lemma  1  C(r)  is  not  empty,  for  any  realistic  assignment  r. 
Proof:  Let  S  =  C  at  |  r(at)=T]. 

If  S  is  uns atisf iabl e ,  then  there  is  al ,  ••*, 

(al  =>  ( a.2  o  (•••  (ak- 1  ^  -«ak)  •••)]) 


ak  such  that 
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is  a  tautology*  Since  r  is  realistic}  it  must  assign  T  to 
this  sentence*  But  ael  is  an  element  of  S,  and  since  r  is 
propositional,  it  assigns  T  to 

(at  2  2  ( •  *  •  (ak«l  2  -*crkj  ••«)))• 

Continuing  in  this  way,  we  get  that  r  assigns  T  to  -*<xk, 
contradicting  the  fact  that  ak  is  in  S*  So  S  must  be 
satisfiable  and,  thus,  there  is  an  s  in  WD  such  that  I(a,s) 
is  T  for  every  a  in  S«  This  s  is,  therefore,  compatible 
with  r  and  so  C(r)  is  not  empty* 

Lemma  2  Cir)  is  maximal,  for  any  realistic  assignment  r* 

Proof?  Suppose  C(r)  covers  s®  If  s  is  not  an  element  of  Ctrl, 
then  s  is  not  compatible  with  r  so  for  some  sentence  a,  say 
(without  loss  of  generality)  I(a,s)  is  T  but  r(«)  is  F* 
However,  since  C(r>  covers  s,  there  is  an  s'  in  C(r)  where 
I(a,s® )  is  T*  But  s®  is  compatible  with  r  and  so  r( a) 
cannot  be  F*  Therefore,'  sis  an  element  of  C(r)  and  so  C(r) 
is  maximal* 

Lemma  3  Let  S  be  a  set  of  sentences  of  PL*  If,  lor  every  a  in  S, 

r(at)  =  T,  and  if  S  I-  p  1  hen  r(p)  =  T 

Proof:  by  induction  on  the  length  of  the  derivation  of  S  I-  p* 

If  p  is  in  S,  then  rijj)  is  T  by  hypothesis*  If  p  is  an 

axiom  then  r(p)  is  T  since  p  is  a  tautology*  Finally  if  p 

follows  from  a  and  ( a^>  p }  where  ria)  and  r(a=p)  are  both  T, 
then  rip)  is  T  since  r  is  a  propositional  assignment* 

Lemma  4  If,  for  every  s  in  C(r),  I(a$s)  -  T,  then  r(a)  =  T* 

Proof:  Let  S  =  f  p  j  rip)  =  T)  and  let  s  be  any  element  of  WD* 

Suppose  for  every  p  in  S,  I(p,s)  =  T*  Then,  s  is  compatible 
with  r  and  so,  by  hypothesis,  I(a,s)  is  T*  Hence  any 

element  of  WD  that  makes  every  element  of  S  true  also  makes 
a  true*  So,  by  the  completeness  theorem  for  propositional 
logic,  S  logically  implies  a  and,  therefore,  by  lemma  3, 
ria)  is  T* 

Lemma  5  C  is  an  injection  from  realistic  assignments  to  MD* 

Proof:  C(r)  is  an  element  of  MD  by  lemmas  1  and  2*  Now  suppose 
C(rl)  =  C(r  i)  .  If  ri(a)  is  T  then  every  element  s  of  C(r2) 

has  I  ( o; ,  3)  being  T  and  so,  by  lemma  4,  r2(-  a)  is  also  T*  If 
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x*  1  ( cr )  is  F  (  "then  rl  ( *«a)  is  T  and  by  "the  same  argument  r2(  ot) 
is  F*  Finally,  if  rl(u)  is  ?,  then  there  must  be  an  element 
s  of  Ctrl)  such  that  I(a,si)  is  F  and  so  r2(a)  cannot  be  T* 
Similarly,  r2(a)  cannot  be  F  so  that  it  must  be  ?• 
Consequently,  if  Ctrl)  is  C(r2)  then  rl  is  r2. 

Lemma  6  C  is  a  surjection  from  realistic  assignments  to  MD* 

Proofs  Let  m  be  any  element  of  MD*  Consider  the  assignment  r 
defined  by  rtat)  is  J(a,.i)*  The  assignment  r  is  a  realistic 
assignment  since  r  assigns  T  to  every  tautology  and  (by 
induction  on  the  length  of  a),  r  is  a  propositional 
assignment*  Now  let  s  be  any  element  of  m*  If  rta)  is  T 
(or  F)  then  I(ce,s)  must  be  T  (or  F)  by  definition  of  J*  So 
s  is  compatible  with  r  and  m  is  a  subset  of  C(r) • 
Conversely,  let  s  be  any  element  of  WD*  Now  assume  that  for 
some  a,  I(a,s)  Is  not  the  same  as  I(a,s*)  for  every  s*  in  m* 
If  I(a,s)  is  T  (or  Fi)  then  J(a,m)  is  F  (or  T)  and  so  r(  a)  is 
F  (or  T)  in  which  case  s  is  not  compatible  with  r* 
Consequently,  if  s  is  compatible  with  r  then  for  every  a  in 
PL,  there  is  an  s*  in  m  such  that  I(a,s)  is  I(a,s')*  So,  m 
covers  s  and  therefore  s  is  an  element  of  m*  Thus,  C(r)  is 
a  subset  of  m  and  therefore,  C(r)  is  equal  to  m*  So,  for 
every  element  of  MD  there  is  a  realistic  assignment  r  such 
that  C(  r )  is  m  • 

The  proof  of  the  theorem  follows  directly  from  lemmas  5  and  6  as 
follows*  Let  m  be  any  element  of  MD  and  let  r  be  the  realistic 
assignment  such  that  r(at )  is  J(a,m)*  Then,  as  in  the  proof  to 
lemma  6,  m  is  C(r)  where  C  is  bijective  by  lemmas  5  and  6* 


3*2*4  Knowledge  Values 

One  thing  worth  noticing  about  the  interpretation  function  J 
is  that  a  slight  simplification  can  be  made  by  considering  the 
total  set  of  truth  values  generated  by  a  model  description  for 
some  sentence! 

(  I  (  a  ,  s  )  |  s  e  mj 


There  are  only  three  possibilities  for  any  ex  and  m 
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1®  CT3  2®  £F)  3c  £T,F] 

corresponding  to  the  assignments  by  J  of  T#  F  and  7 # 
respectively®  So  if  we  let 

TRUE  -  (T)  known  to  be  true 

FALSE  -  CF)  known  to  be  false 

UNKNOWN  “  £T#F)  not  known  to  be  either  true  or  false 

we  can  redefine  J  as  follows J 

Defn  J  c  CPL  x  MD  -*  (TRUE , FALSE  #  UNKNOWN}  3  Is  defined  by 
J (a  *  m3  -  C  I ( a  *  3 )  |  s  e  m] 

The  advantage  of  this  definition  is  that  if  makes  explicit  what 
truth  values  are  possible  for  a  sentence  in  a  given  model 
description®  Just  as  model  descriptions  are  sets  of  world 
descriptions}  the  knowledge  values  TRUE #  FALSE  and  UNKNOWN  are 
sets  of  truth  values®  There  is#  moreover#  an  important 
relationship  between  these  two  sets® 

Theorem  Let  m  and  n  be  elements  of  MD® 

m£n  iff  for  every  a  e  PL#  J(a«ra3  £  J(a#n) 

Proof  of  only  if S  Suppose  t  (=  T  or  F)  is  an  element  of  J(a«m)® 
Then  there  is  an  s  in  m  where  I(a#s)  =  t®  Since  m  is  a 
subset  of  n»  s  is  an  element  of  n  and  so  t  is  an  element  of 
J  ( a  #  n )  • 

Proof  of  if!  Suppose  s  is  an  element  of  m  and  let  a  be  any 
sentence®  I(a»s)  is  an  element  of  J(a#m)  and  therefore  of 
J(a#n)®  So  there  is  an  s®  in  n  such  that  I(a#s*)  is  I(a#s)® 
Since  this  is  true  for  any  sentence#  n  covers  s  and 
therefore#  s  is  an  element  of  n® 

Note  that  this  theorem  depends  on  the  fact  the  model  descriptions 
are  maximal  sets® 

The  subset  partial  ordering  on  elements  of  MD  has  a  natural 
interpretation  in  that 

m  £  n  means  that  m  agrees  with  but  possibly  has  more 
information  about  the  world  than  n 

Alternately#  using  Scott  terminology  (see  e®g®  (Stoy  77 ] J #  we 
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could  say  that  m  is  approximated  by  n*  So  the  model  descriptions 
below  a  given  model  description  correspond  to  having  acquired 
additional  information  about  the  world  in  a  way  consistent  with 
what  is  already  known*  The  above  theorem  states  that  this 
knowledge  acquisition  can  also  be  viewed  as  passing  from  some 
knowledge  value  to  one  of  its  subsets  (e«g*  going  from  UNKNOWN 
to  TRUE)  for  one  of  the  sentences  of  PL*  So  Just  as  a  model 
description  is  the  description  of  the  set  of  worlds  consistent 
with  what  is  knownf  a  knowledge  value  for  a  sentence  is  the  set 
of  truth  values  it  could  have  consistent  with  what  is  known*  The 
above  theorem  guarantees  that  the  acquisition  of  knowledge  can  be 
viewed  as  the  elimination  of  a  candidate  from  either  range* 


A  second  implication  of  this  redefinition  of  J  is  that  it 
generalizes  easily  to  accomodate  truth  value  gaps*  In  this  case, 
there  are  three  potential  truth  values  and,  therefore,  seven 
potential  knowledge  values! 


Knowledge  Va lue 
NOINFORMAT  ION 
NOTFALSE 
NOTTRUE 
UNKNOWN 
TRUE 
FALSE 
GAP 


Potential  T ruth  Values 
T,  F  and  * 

T  and  * 

F  and  * 

T  and  F 
T 
F 
* 


It  is  worth  noting  that  each  of  these  seven  values  could  arise  in 
practice*  For  example,  suppose  we  have  a  primitive  sentence  like 


The  square  root  of  i  is  greater  than  J* 


where  the  definition  of  a  real,  positive  square  root  is  known  but 
the  values  of  i  and  j  are  not.  In  this  case,  the  knowledge  value 
of  the  sentence  would  be  NO INFORMATION  since  it  can  be  true, 
false  or  neither  depending  on  the  values  of  i  and  J*  Moreover, 
information  can  be  acquired  that  eliminates  each  of  the  three 
alternatives  independently  as  follows: 


i  >  0  eliminates  the  *  truth  value 
0  >  j  eliminates  the  F  truth  value 
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J  >  I  eliminates  the  T  truth  value 
For  instance?  with  the  knowledge  that 

i  >  0  and  0  >  J 

the  sentence  has  knowledge  value  TRUE?  that  is?  is  known  to  be 
true  ® 


0*2*5  Inconsistent  Knowledge 

One  possibility  I  have  not  yet  mentioned  is  to  allow  a  model 
description  to  embody  contradictory  information ©  All  that  really 


needs  to  be 

done 

is  to  allow 

the 

empty  set  as 

a  model 

description  « 

Thi  s 

corresponds 

to 

have  acquired 

too  much 

information  so  that  no  world  can  simultaneously  satisfy  all  that 
is  known*  We  can  then  postulate  a  fourth  knowledge  value  (or 
eighth?  if  gaps  are  allowed) $  INCONSISTENT  corresponding  to  the 
empty  set  of  truth  values®  Note  that  this  knowledge  value  is 
distinct  from  the  GAP  value  of  the  previous  section®  For 
example?  GAP  will  be  the  value  of  the  square  root  sentence  when 
it  is  known  that 

0  >  J  and  J  >  i 

or  simply?  when  i  is  known  to  be  negative*  On  the  other  hand? 
INCONSISTENT  would  arise  if  we  also  find  out  that 

i  >  0 

which  eliminates  the  *  potential  truth  value  and  contradicts  what 
is  already  known* 

Although  allowing  for  the  empty  set  of  truth  values  and 
world  descriptions  does  make  the  knowledge  values  and  model 
descriptions  into  lattices?  my  primary  interest  is  in  consistent 
knowledge  so  that?  as  in  the  case  of  gaps?  I  will  normally  ignore 
the  possibility  and  simply  point  out  which  results  depend  on  the 
consistency  assumption* 

The  bottom  of  the  partial  ordering  on  MD  is?  therefore?  the 
model  descriptions  containing  a  single  world  description*  These 
represent  the  case  where  complete  information  has  been  acquired 
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and  all  candidates  but  one  have  been  eliminated^  Any  additional 
information  about  the  world  is  either  redundant  or  contradictory* 
Not  surprisinglyt  J  behaves  exactly  like  I  in  these  descriptions 
and  specifies  a  truth  table*  In  practice)  howevert  one  never 
expects  to  acquire  enough  information  to  arrive  at  a  complete 
model  description*  but  only  to-  some  'finite*  approximation  to  it 
(as  will  be  discussed  in  chapter  five)* 

At  the  other  extreme  of  the  partial  ordering  of  model 
descriptions  is  the  set  of  all  world  descriptions*  In  this  case* 
nothing  is  known  about  the  world  so  that  all  tautologies  are 
TRUE*  their  negations  are  FALSE  and  all  other  sentences  are 
UNKNOWN*  So  the  top  of  the  model  description  ordering  can  be 
thought  of  as  representing  the  least  amount  of  information 
possible • 


3*3  THE  KNOWLEDGE  LANGUAGE 

So  far  I  have  dealt  with  incomplete  knowledge  of  a  world 
using  the  language  PL  and  the  three  knowledge  values  TRUE*  FALSE 
and  UNKNOWN*  A  more  general  and  flexible  way  is  to  consider  what 
I  have  been  calling  model  descriptions  not  as  partial 
descriptions  of  a  world*  but  as  complete  specifications  of  the 
content  of  a  knowledge  base  (or  KB ) •  Instead  of  talking  about 
the  world  using  PL,  there  will  be  a  new  language  for  talking 
about  a  KB  about  the  world.  Instead  of  asking  if  a  sentence  of 
PL  is  known  to  be  true,  known  to  be  false  or  neither,  the 
question  will  now  be  whether  or  not  a  sentence  of  this  new 
language  (that  talks  about  KBs)  is  true  or  false. 

3*3*1  The  Language  KPL 

The  language  KPL,  which  I  will  define  in  a  moment,  has  the 
property  that 

If  a  €  PL,  then  Ka  e  KPL. 

The  idea  here  is  that  the  K  connective  is  to  be  interpreted  as 
"known  to  be  true" I 
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Ka  means  a  is  known  to  be  true 

So  just  as  the  sentences  of  PL  talk  about  a  worlds  the  sentences 
of  KPL  will  talk  about  a  KB?  saying  what  is  or  is  not  known. 

The  reason  this  way  of  dealing  with  knowledge  is  at  least  as 
expressive  as  what  has  been  done  so  far  can  be  seen  by 
considering  that 

a  is  TRUE  iff  Ka  is  true  (and  K^a  is  not  I 
a  is  FALSE  iff  K-*a  is  true  (and  Ka  is  not) 
a  is  UNKNOWN  iff  neither  Ka  nor  K”»a  is  true 

Moreover?  we  can  also  deal  with  inconsistent  knowledge  if  so 
desired  since 

a  is  INCONSISTENT  iff  both  Ka  and  K-*a  are  true 

In  addition?  truth  value  gaps  could  be  accomodated  by  postulating 
a  second  connective  analogous  to  K?  as  is  done  in  [Levesque  79]? 
but  I  will  not  do  so  here. 

I  will  now  turn  my  attention  to  the  definition  of  KPL «  The 
most  general  language  I  will  consider  is  one  where  we  can  speak 
simultaneously  about  what  is  true  and  what  is  known  to  be  true* 
So  for  any  sentence  in  the  language?  there  will  be  another 
stating  that  the  first  sentence  is  known  to  be  true* 

Def n  KPL?  the  knowledge  language  for  PL?  is  the  least  set 
satisfying l 

1.  PRIM  £  KPL 

2*  If  at  p  €  KPL?  then  -»a  ?  (a=>p)  and  Ka  e  KPL* 

Other  connectives  can  be  introduced  as  with  PL*  Note  that  KPL 
allows  us  to  talk  not  only  about  the  world  (since  it  includes  PL) 
and  what  is  or  is  not  known  about  the  world?  but  also  what  is  or 
is  not  known  about  what  is  known  about  the  world  and  so  on*  So 
KPL  allows  us  to  talk  about  meta-knowledge  since  for  every 
sentence  a  of  KPL?  the  following  are  also  sentences! 

Ka 


KKa 

K  ( a=>Ka ) 


it  is  known  that  a 

it  is  known  that  it  is  known  that  a 

it  is  known  that  if  a  is  true  then  it  is  known 
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l~»Ka^K-»Kac)  if  a  is  not  known  then  it  is  known 

not  to  be  known 

and  so  on* 

The  question  we  must  now  lace  is  how  to  give  these  sentences 
a  formal  interpretation!  that  isy  what  constraints  are  to  be 
imposed  on  an  assignment  of  either  true  or  false  to  the 
sentences*  Perhaps  the  easiest  way  to  do  this  is  to  consider  a 
proof  theory  for  the  language  KPL  which  will  specify  the  theorems 
andy  therefore  y  will  tell  us  which  sentences  must  always  be 
assigned  to  true* 


3*3*2  Axiomatization  Of  KPL 


The  first  constraint  we  will  want  to  impose  on  any 
interpretation  function  for  KPL  is  that  it  must  result  in 
propositional  assignments  so  that  the  connectives  -»  and  =>  are 
interpreted  properly*  This  can  be  doney  as  it  would  be  in  PLy  by 
three  axiom  schemata  and  a  rule  of  inference* 


A 1  •  (  a  3  (  p=a  )  ) 

A2*  ((  a=>(  ))=>((  a=>p)  =  (  )  ) 

A3*  (  (  )  s)  (  (ip3a)3p)  ) 

MP*  From  a  and  (a=>p)  f  to  infer  p* 


This  is  the  standard  basis  for  a  propositional  calculus  except 
that  the  meta-variables  •a* y  'p*  and  ,ul  range  over  any  sentence 
of  KPL*  This  guarantees  that  all  tautologies  (including  those 
containing  the  K  symbol)  are  theorems  of  KPLy  andy  thereforey 
will  be  valid  in  the  interpretation  to  be  defined* 


The  next  constraint  we  want  to  impose  on  the  interpretation 
of  sentences  of  KPL  involves  the  K  connective*  Essentiallyf  what 
we  have  to  say  is  that  knowledge  behaves  in  the  way  we  have 
previously  noted  in  section  3*2*  In  other  words y  we  want  to  have 
that 


1*  a  is  TRUE  whenever  a  is  a  tautology 

2.  a  is  TRUE  (or  FALSE)  iff  -ia  is  FALSE  (or  TRUE) 

3*  If  a  and  (at=>p)  are  TRUE  then  so  is  p 

(asp)  is  FALSE  iff  a  is  TRUE  and  p  is  FALSE 


4 


Page  3— 19 


Now  taking  K a  as  saying  that  a  is  TRUE  and  K-*cp  as  saying  that  a 
is  FALSE*  the  requirements  C 2)  and  (43  will  follow  from 
requirements  (1)  and  (3),  as  I  will  show  below*  So  all  that  has 
to  be  done  is  to  enforce  requirement  (1)  and  (31®  Furthermore* 
given  (3),  ( 1)  can  be  guaranteed  by  requiring  that  the  axioms  of 

PL  come  out  TRUE  since  ail  the  tautologies  follow  from  the  axioms 
by  modus  ponens«  Hence*  all  we  need  is  four  additional  axiom 
schemata  for  KPL: 

KAl  ®  K(  a=>  (  )  ) 

KA2  e  K(  (a=>  (p=w)  )=(  (  a=>p)=>lo&v)  I  3 
KA3  ®  K(  (  (-.p^ajsp  )) 

KMP  *  (K(a3^j3(K«3Kp)) 

The  first  three  axiom  schemata  simply  say  that  the  first  three 
axioms  of  KPL  are  always  known  to  be  true;  the  ‘last  axiom 
schemata  says  that  if  a  and  (a=>p)  are  known  to  be  true*  then  p  is 
also  known  to  be  true*  I  will  now  show  that  this  is  sufficient 
to  enforce  the  four  constraints  mentioned  above* 

Th eoreia  1  If  a  is  a  tautology*  then  H  K a® 

Proof;  If  a  is  a  tautology,  then  by  the  completeness  theorem  of 
propositional  logic,  a  is  provable  from  the  axioms  of  PL 
using  modus  ponens*  So  the  proof  is  by  induction  on  the 
length  of  the  derivation*  If  a  is  an  instance  of  Al,  A2  or 
A3,  then  the  theorem  holds  by  virtue  of  KAl,  KA 2  or  KA3*  If 
a  follows  from  (p=>a)  and  p»  then  by  the  induction 

hypothesis,  K(p^cr)  and  K p  are  derivable*  So  by  KMP  and 
using  modus  ponens  Ka  is  derivable  as  well* 

Theorem  2  H  Ka  iff  t-  K-»-*a*  (i*e*  a  is  TRUE  iff  -^a  is  FALSE)* 
Proof:  Since  (a^-»-*a)  is  a  tautology,  by  theorem  1,  K  (  a  =>-■-•  a )  is  a 

theorem  and  so  if  Ka  is  a  theorem,  by  KMP  and  MP ,  K-«-«a  is 
also  a  theorem*  The  converse  is  analogous  since  (naaa)  is 
also  a  tautology* 

Theorem  2  enforces  the  second  restriction  above  since  it 
immediately  follows  that  a  sentence  a  is  FALSE  iff  ~%a  is  true 
because  K-%a  can  be  interpreted  as  saying  both  that  a  is  FALSE  and 
that  -«a  is  TRUE*  In  addition,  restriction  (3)  is  guaranteed  by 
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the  presence  of  KMP*  So  all  that  is  left  is  restriction  (4). 
Theorem  3  I-  K-«  (  a  =>p  )  =  (  Ka  aK-* p )  • 


Proof!  I  will  present  a  derivation  of  this 

sentence  of 

KPL, 

using  'PL*  as  a  Justification  for 

a  step  based 

on 

propositional  logic*  Parentheses  will 

be  omitted 

when 

unambi guous • 

1*  -« ( ac=>p  )  =>a 

PL 

2*  K C  -» (  a=>p  )oa) 

1 , Thm  1 

3«  K-i(a3p)3Ka 

2  *  KMP  *  MP 

4*  -»  (  a=> p  )  =>  -»p 

PL 

5*  K(-i(a=p  )3-»p) 

4 f  Thm  1 

6*  K-»(  a=>p  )  3K-»p 

5  , KMP|MP 

7*  K-i(at3p)3(KaAK-»p) 

3, 6, PL 

8*  (a3(-.p3^(a3pj)) 

PL 

9*  K(a=  (-ip3-i.(a3p  )  }  ) 

8* Thm  1 

10*  Ka=K  ( (  a=> fi  )  ) 

9  y  KMP  *  MP 

11*  Za3<  K-ip3K-i(a3p)  ) 

10 , KMP, PL 

12*  (  KaA  K~»fi  )  3>K-»  (  a^p ) 

11  ,PL 

13*  K-«  ( )  =  (  Ka£AK-«p  ) 

7, 12, PL 

Corollary  l-  K(qcap)  =  (KaAKo) 

These  three  theorems  together  ensure  that  the 

interpre  ta  ti on 

of 

KPL  satisfies  the  conditions  imposed  in  previous  sections* 

There  is  one  additional  constraint  that  has  to  be  placed  on 

the  interpretation  of  KPL*  So  far,  nothing  has  been  said  about 
how  sentences  involving  met  a— knowl edge  are  to  be  interpreted* 
For  example*  we  have  by  Theorem  1  that 

I-  K  (  p3p ) 

which  says  that  (pap)  is  always  known  to  be  true*  But  so  far, 
nothing  can  be  derived  about  the  sentence 

KK( pap) 

which  says  that  the  previous  sentence  is  known  to  be  true*  This 
problem  did  not  arise  when  we  were  using  PL  and  the  three 

knowledge  values  since  there  was  no  way  to  talk  about 

meta— knowledge*  With  KPL* 


the  issue 


does  arise  and  we  must 
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consider  what  constraints  are  to  be  placed  on  met acknowledge • 

The  restriction  that  will  be  placed  on  meta»knowledge 
corresponds  to  the  assumption  of  closure  of  section  2*1*2« 
Essentially#  the  idea  is  ensure  that  everything  is  known  about 
what  is  known  by  the  KB:  all  me t acknowledge  is  accurate  and 
complete*  In  other  words#  if  a  is  a  sentence  that  talks  only 
about  what  is  or  is  not  known#  then  a  is  true  if  and  only  if  it 
is  known  to  be  true*  So  every  true  sentence  that  is  strictly 
about  the  KB  is  known  by  the  KB  to  be  true  and#  moreover#  any 
sentence  about  the  KB  that  is  known  by  the  KB  to  be  true  is# 


Indeed  # 

true  ® 

I 

will  first 

of 

all  define 

what  I  mean  for  a 

sentence 

to  be 

Just 

about  the 

KB 

(and  not# 

presumably#  the 

world ) ® 

Def n  An  occurrence  of  a  primitive  sentence  p  in  a  sentence  is 
bound  when  it  appears  within  the  scope  of  a  K#  and  free 
otherwi se  * 

Def n  A  sentence  of  KPL  is  pure  iff  it  contains  no  free  occurrence 
of  a  primitive  sentence* 

In  general#  the  conditions  for  a  pure  sentence  to  be  true  are 
based  on  having  other  sentences  known  (or  not  known)  to  be  true 
(or  false)  and  not  on  whether  the  primitive  sentences  are  true  or 
not. 

Thus#  the  final  constraint  to  be  placed  on  the 
interpretation  of  KPL  is  that  pure  sentences  are  true  exactly 
when  they  are  known  to  be  true* 

MK*  a-K a  for  a  pure 

This  completes  the  axiomatization  of  KPL*  To  summarize#  we  have 
the  following  proof  theory: 

Axioms 

Al •  ) 

A2*  (a3(/)3w))3((a3p)3(flPw)i) 

A3*  (ip3- «a)33( 

KAl  •  K  (  a3  (  p=>ot )  ) 

K  (  (  a=>  (  j  ))=>((  a3p )  =>  (  a=>u/i)  )  ) 


KA2. 
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KA3 •  K(  (-»p3-ice)3(  (-.^3ai)3p)  ) 

KMP  •  K{a3/))3{KaoKp) 

MK*  a=Ka  for  a  pure 

Rule  of  Inference 

MP.  From  a  and  (a=>p)*  to  infer  p « 

Before  considering  an  interpretation  that  satisfies  all  and 
only  these  constraints*  it  perhaps  worth  examining  a  few 
properties  of  this  axiomatiza tion •  While  I  have  yet  to  present  a 
notion  of  truth  for  the  language,  I  will  nonetheless  refer  to  the 
theorems  as  being  always  true  in  anticipation  of  a  soundness  and 
completeness  result* 


3*3*3  Some  Me ta— theorems 

In  this  section*  I  will  present  a  few  met a— theorems  of  KPL 
related  to  the  assumptions  of  competence*  consistency  and  closure 
of  section  2*1*  The  first  property  worth  noticing  about  KPL  is 
that  theorem  1  of  the  previous  section  can  be  strengthened  to 
take  into  account  me ta— knowl edge •  The  result  here  is  that  if  a 
sentence  is  always  true  then  it  is  always  known  to  be  true* 

Th eorem  4  If  H  at  then  I-  Ka* 

Proof!  by  induction  on  the  length  of  the  derivation* 

If  at  is  an  instance  of  Al,  A2  or  A3  then  Ka  is  a  theorem  by 
KAl *  KA2  or  KA3  respectively*  If  a  is  an  instance  of  KAl* 
KA2*  KA3,  KMP  or  MK*  then  a  is  pure  so  by  MK  and  MP *  Ka  is  a 
theorem.  Finally,  if  a  follows  from  lp=>a)  and  p  where  these 
are  theorems,  then  by  induction  K(p=>a)  and  Kp  are  also 
theorems  and  so*  by  KMP  and  MP*  Ka  is  a  theorem* 

Theorem  4  and  KMP  together  correspond  to  the  assumption  of 
competence  of  section  2* 1-1,  in  that  what  is  known  includes  what 
follows  from  what  is  known* 

There  are  two  points  to  be  made  about  theorem  4*  First  of 
all*  it  should  not  be  confused  with  the  much  stronger  claim  that 

I-  ( a  =>  Ka  ) 


which  says  that  whenever  a  sentence  is  true  then  it  is  known  to 
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be  true©  This  would  correspond  to  saying  that  the  KB  is  always  a 
complete  model  in  that  all  truths  are  known© 

The  second  point  about  theorem  4  is  that  its  converse  is  not 
true®  In  other  words*  there  are  sentences  that  are  always  known 
to  be  true  and  yet  are  not  theorems®  The  sentences  in  question 
are  those  that  state  that  the  KB  is  an  accurate  model® 


Theorem 

Proof l 


5  H 

K(Ka=>«) 

1® 

C  Ka^a)  J 

PL 

2® 

K { as ( Kasai) 

1  *  Thm  4 

3  © 

(KasKUasai  ) 

2 *  KMP * MP 

4e 

C~«Ka3(  Ka^ct)  ) 

PL 

5® 

Kl->Ka3(Ka=>a)  1 

4* Thm  4 

6  ® 

(  K-«Ka=>K  (  Ka=>a  )  ) 

5*KMP,MP 

7. 

(^Ka=>K-eKa) 

MK 

8. 

(-#Ka=»K(  Ka=a)  ) 

7 , 6 , PL 

9. 

K(Ka=>a) 

3 , 8 , PL 

So  theorem  5  guarantees  that  although  (Ka^a)  is  not  always  true* 
a  KB  will  behave  as  if  it  were*  since  it  always  "knows1*  it  to  be 
true  and*  therefore*  will  respect  its  internal  integrity# 

The  final  property  worth  discussing  at  this  stage  is  that 
the  axiomatiza ti on  I  have  proposed  guarantees  that  a  KB  satisfies 
the  assumption  of  consistency#  In  other  words*  it  is  always  the 
case  that  if  a  sentence  is  known  to  be  true*  then  its  negation  is 
not  known  to  be  true# 


Theorem 

6  H 

(  Ka3-iK-«a) 

Proof  I 

1. 

K(Ka=»crJ 

Thm  5 

2. 

K  (  (  Ka^a  )  =>  ( -«a=>-*Kai)  ) 

PL  *  Thm  4 

3. 

K  (  ■»  ct  K  a  ) 

2,1  *  KMP  *  MP 

4# 

(  K-»a=>K-*Ka) 

3  *  KMP  *  MP 

5. 

(K-»Ka^Ka) 

MK 

6. 

( K-»a  3-*Ka ) 

4,  5, PL 

7. 

( Ka^iK^a ) 

6,  PL 

This  theorem  guarantees  that  there  are  sentences  not  known  to  be 
true  and  therefore*  that  the  KB  is  free  from  contradiction#  The 
key  step  in  the  derivation  is  step  5*  where  using  MK ,  we  conclude 
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"that  something 
known*  Conseque 
closely  related 


is  not  known  from  the  fact  that  something  is 
ntly,  the  assumption  of  consistency  is  very 
to  the  assumption  of  closure* 


In  summary?  then?  the  axi oma tiza t ion  of  KPL  sati 
three  assumptions  about  knowledge  made  in  sec 
competence?  consistency  and  closure*  I  will  now 
attention  to  a  formal  interpretation  of  this  language* 


sf  i  es 
tion 
turn 


the 
2.  1 S 
my 


3*3*4  Semantics  Of  KPL 


Since  every  sentence  of  PL  is  also  a  sentence  of  KPL?  there 
are  sentences  of  KPL  whose  truth  in  no  way  depends  on  anything 
being  known*  In  addition  there  are  the  pure  sentences  of  KPL 
whose  truth  depends  only  on  what  is  known*  So?  for  example?  to 
interpret  sentences  like 

p  or  -« (  (  p^q  )  =>r ) 


there  is  no  need  to  talk  about  any  KB  at  all. 
interpret  sentences  like 


Conversely?  to 


Kp 


or  (K(p3q)3(Kp3Kq) ) 


there  is  no  need  to  talk  about  what  is  true  in  the  world  at  all* 
Finally?  for  sentences  like 

p=>Kq  or  (-»K (  p=>q)  o-*r ) 

we  have  to  be  able  to  ask  both  about  what  is  true  in  the  world 
and  what  is  known  to  be  true  in  a  KB*  The  upshot  of  all  of  this 
is  that  the  interpretation  function  will  have  to  interpret  a 
sentence  of  KPL  with  respect  to  both  a  world  description  and  a 
model  description.  In  other  words,  the  universe  where  sentences 
of  KPL  are  going  to  be  true  or  false  will  have  two  components,  a 
world  and  a  KB?  and  therefore  be  described  by  a  world  description 
and  a  model  desc  ripition  • 


The  primitive  sentences?  negations  and  mat 
will  obviously  be  interpreted  as  before*  The 
is  how  to  interpret  a  sentence  Kdf  with  respect 


erial  implications 
only  real  problem 
to  some  universe* 


Since 


we 


want  Ka  to  mean  a  is  known  to  be  true,  we  can  base  our 
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definition  on  the  definition  of  J  from  section  3«2*3«  For  J»  a 
sentence  was  known  to  be  true  when  it  was  true  in  every  world 
consistent  with  what  was  known*  If  a  is  not  a  sentence  of  PL? 
however  y  it  is  not  true  or  false  with  respect  to  a  world*  but 
with  respect  to  a  universe  that  includes  both  a  world  and  a  KB* 
Obviously*  the  worlds  consistent  with  what  is  known  will  be  as 
before*  On  the  other  hand*  because  of  the  assumption  of  closure? 
there  is  only  one  KB  consistent  with  what  is  known®  the  KB 
itself*  Since  a  KB  knows  everything  that  it  does  or  does  not 
know?  there  is  no  uncertainty  regarding  what  KB  is  the  one  being 
modelled  by  a  given  KB  and  so  the  only  KB  consistent  with  what 
the  KB  knows  about  Itself  is  itself*  Hence?  a  universe  is 
consistent  with  what  is  known  in  a  given  KB  when  the  world 
component  is  described  by  some  element  of  the  model  description 
of  that  KB  and  the  model  component  Is  the  KB  itself* 


This  leads  to  the  following  interpretation  function  for  the 
sentences  of  KPL l 

Defn  V  <?  £  KPL  x  WD  x  MB  -  (T,F}]  is  defined  by 

1*  V{a?s?ra)  =  s ( a )  when  a  e  PRIM 
2*  V  (-*«?  s  ?  m )  =  T  If  V(a?s?m)  =  F 

=  F  if  V(a?s?m)  =  T 

3*  V(  (  a=>p )  ?  s?  m)  -  T  if  V(a*s*m)  =  F  or  V(p?  stru)  =  T 

=  F  if  V(a«s?m>)  =  T  and  V(p*s*mJ  =  F 

4*  V(Kae?s?m)  —  T  if  V(a?s*?m)  =  T  for  every  s'  era 

=  F  if  VtafS'fia)  =  F  lor  some  s*  e  m 


De fn  A  sentence  a  of  KPL  is  valid  iff  for  every  s  and  m?  V(a?s?m) 
is  T  and  sa tisf iable  if  its  negation  is  not  valid* 

I  will  not  prove  that  the  proof  theory  of  KPL  is  sound  and 
complete  since  this  will  be  obvious  from  the  corresponding 
theorems  for  FOPC*  However?  there  is  a  point  worth  noting  about 
the  definition  of  V:  the  world  description  and  model  description 
which  together  determine  the  truth  or  falsity  of  sentences  may 
bear  no  relation  one  to  the  other*  The  assumption  here  is  that 
if  the  universe  is  made  up  both  of  a  world  and  a  KB?  then  the  KB 
need  not  be  an  accurate  model  of  that  world*  This  corresponds  to 
the  assumption  made  in  section  2*1*1  that  a  KB  need  not  be  an 
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accurate  model 
that  is  required 
competently  and 
sentences 


of  the  real  world  (in  which  it  is  located).  All 
is  that  the  KB  partially  describe  some  world 
consistently.  In  particular (  neither  of  the 


( Kp=p) 


or  (p=Kp) 


are  valid  which  can  be  seen  simply  by  choosing  world  and  model 
descriptions  appropriately. 


3.4  COMPARISON  WITB  OTHER  APPROACHES 

In  this  section  I  will  briefly  contrast  the  definition  of 
KPL  with  two  other  languages  that  deal  with  similar  constructs. 
The  first  such  language  is  the  met a— language  of  PL  itself  and  the 
second  is  the  knowledge  language  based  on  modal  logic.  The  main 
point  is  to  motivate  the  two  results  of  this  section:  the 
reducibility  theorem  which  states  that  meta— sentences  are 
dispensable  in  KPL  »  and  an  alternate  axiomatization  of  KPL  which 
brings  to  light  its  relationship  to  modal  logic. 


3.4.1  The  Met a- 1 anguage  Of  PL 

One  interesting  point  about  the  axiomatization  of  KPL  given 
in  section  3.3.2y  is  how  clearly  it  illustrates  the  assumptions 
being  made  about  the  language: 

1.  KPL  is  a  propositional  language  in  that  the  connectives 

-i  and  have  their  usual  meaning  (from  Al»  A2»  A3  and 

the  rule  of  inference  MP ) • 

2.  The  rules  of  a  propositional  language  are  known  in  that 
the  axioms  are  always  known  and  rule  of  inference  can  be 
applied  appropriately  ( KA 1 »  KA2»  KA3  and  KMP ) . 

3.  Met  a- knowledge  is  always  accurate  and  complete  ( MK )  . 

In  many  ways  y  the  K  connective i  as  it  applies  to  world  knowledge* 
behaves  like  the  provability  relation  of  PL. 
proof  theory  of  PL  can  be  described  by 


For  example t  the 
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l~  is  the  least  predicate  such  that  for  every  a*  p*  u  e  KPL* 

H-  ( cr^  (p3a)  I 

H  ((fl!3(/)3w1)3((a3p)3(a3«))) 

1“  (  {-s pD“iaj  3(  (“«p3a)3/3)  ) 

If  »-  (as^p)  *  then  if  H  at  then  I-  p-® 

The  K  axioms  are  the  result  of  replacing  in  the  above 

H  by  K 

and  If  a  then  p  by  (aspj 

producing  KAl*  KA2*  KA3  and  KMP*  respectively®  So#  in  terms  of 
world  knowledge*  KPL  is  much  like  a  formal  equivalent  to  the 
meta-language  used  to  describe  PL  in  that  we  have  formal 
equivalents  to  the  axioms  and  rules  of  inference  as  well  as  a 
formal  equivalent  to  the  provability  relation®  This  fact  will  be 
used  when  I  move  to  the  more  powerful  language  of  FOPC  in  the 
next  chapter® 

The  question  raised  by  the  above  observation  is  why  we 
should  even  bother  dealing  with  KPL  since*  in  some  sense*  it  is 
equivalent  to  the  meta— language  of  PL®  There  are  two  major 
reasons®  First  .  of  all*  KPL  is  a  formal  language  that  can  be 
given  a  formal  interpretation  whereas  the  met a— language  of  PL* 
however  precise,  is  an  informal  language® 

Now  it  might  be  countered  that  all  that  is  really  needed  is 
a  formal  version  of  the  meta-language  of  PL  in  the  spirit  of 
[Weyhrauch  803®  The  problem  with  this*  and  the  second  reason  for 
wanting  KPL*  is  that  while  every  me ta— statement  about  PL  may  be 
translated  into  a  sentence  of  KPL*  the  converse  is  not  true  since 
KPL  allows  us  to  talk  about  me ta— knowledge®  For  example*  what 
could  the  meta-statement 

If  h-  a  then  t-  I-  a® 

possibly  mean?  If  this  is  a  statement  at  all*  it  certainly  is  a 
confused  one  since  what  follows  an  occurrence  of  t—  in  a  statement 
should  be  a  sentence  of  PL  and  not  a  statement  about  some 
sentence  of  PL  ( such  as  one  saying  that  a  is  a  theorem) •  On  the 
other  hand*  the  formal  sentence 
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(  Ka=>KKar ) 

can  (and  has  been)  given  a  perfectly  reasonable  and  formal 
interpretation* 

However*  there  Is  a  sense  in  which  the  above  argument  does 
not  apply  to  KPL •  As  I  will  prove  below*  sentences  with  nested  K 
operators  like  the  above  are  theoretically  dispensable  in  KPL* 
In  other  words  *  for  every  sentence  of  KPL  that  talks  about 
meta— knowledge*  there  is  an  equivalent  sentence  that  only  talks 
about  world  knowledge*  This  must  not  be  taken  as  an  argument 
against  my  whole  approach*  on  the  other  hand*  since  I  will  show 
that  this  kind  of  reduction  to  world  knowledge  does  not  work  in 
the  case  of  FOPC *  the  language  I  am  primarily  interested  in* 

1*  0(a)  =  0  when  a  e  PRIM 

2 •  0 ( in )  =  0(a) 

3*  0 ( flpp  )  =  maximum  of  0(a)  and  0 ( p) 

4.  0(Ka)  =  1  +  Ota) 

So  the  order  of  a  sentence  is  the  highest  nesting  of  the  K 
connective  in  the  sentence.  The  theorem  below  states  that  no 
sentence  with  an  order  higher  than  1  is  ever  needed  and* 
therefore*  that  all  meta-knowledge  (order  above  1)  reduces  to 
world  knowledge  (order  equal  to  1) • 


Lemma  1  If  a  is  pure,  then  [ K ( avp ) = ( a vKp ) ]  is  a  theorem. 


Proof  I 

1. 

a  =  Ka 

MK 

2. 

K(-ia=>p)  =>  (  K-ia=Kp) 

KMP 

3. 

K  ( -ioPp  )  =  (-«a3 Kp  ) 

1 , 2  *  PL  * 

4. 

Ka  =>  K(avp) 

Thm  1 

5. 

a  =  K ( avp ) 

1,4* PL 

6. 

Kp  =>  K  ( a  vp  ) 

Thm  1 

7. 

(  avKp  )  =>  K  (avp) 

5, 6*  PL 

8. 

K(avp)  =  ( avKp) 

'  3* 7, PL 

Lemma  2 

If 

cr  is  a  sentence  of  KPL  where  0(a) 

>  0*  then  there 

another  sentence  u  equivalent  to  Ka  where  0  ( u> )  is  less  "than 
0  (  a  )  + 1  • 

Proof:  Put  a  into  an  equivalent  CNF  treating  any  subexpression 

dominated  by  a  K  as  if  it  were  a  letter.  This  can  be  done 
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using  only  the  properties  of  PL®  The  resulting  sentence  is 
a  conjunction  of  terms 

C pi  v  +/-KAil  v  v  +/-KAin] 

where  the  pi  are  elements  of  PL,  the  +/—  denotes  possible 
negation  and  the  O(AiJ)  are  less  than  0(a) «  Thus,  Ka  is 
equivalent  to  the  conjunction  of 
K[ pi  v  +/-KA11  v  +/»KAin] 

Since  all  but  the  first  term  here  are  pure,  by  lemma  1,  this 
is  equivalent  to 

[  Kpi  V  9ee  V  +/-KAin] 

and  so  the  conjunction  of  these  has  order  no  greater  than 
0(<X$  e 

Theorem  ( Reduciblli ty )  Every  sentence  of  KPL  is  equivalent  to 
another  whose  order  is  no  greater  than  1® 

Proof.  by  induction  on  the  order  of  the  sentence®  Assume  the 
sentence  has  been  put  in  the  form  suggested  by  lemma  2® 
Consider  a  term  KAiJ  appearing  in  the  sentence®  By 

induction,  we  assume  that  the  order  or  AiJ  is  either  0  or  1® 
If  0,  then  leave  AiJ  as  is;  if  1,  then  find  by  the  lemma  2 
another  sentence  u>  that  is  equivalent  to  KAiJ  and  whose 
order  is  1  or  0®  The  resulting  conjunction  of  disjunctions 
has  order  0  or  1® 


This  theorem  guarantees  that  anything  that  can  be  said  about 
roe ta— knowledge  in  KPL,  can  be  phrased  strictly  in  terms  of  world 

knowledge®  For  example,  the  sentence 

« 

K  (-*K-»p^p  ) 


which  says  that  it  is  known  that  p  is  true  unless  it  is  known  to 
be  false,  reduces  to 


(  "»K-sp3Kp  ) 


which  says  that  the  sentence  p  is  either  known  to 
known  to  be  false®  In  other  words,  the  only  way  it 
that  p  is  true  unless  known  to  be  false  is  when  p  is 
to  be  true  or  known  to  be  false®  The  point  is  that 
sentence,  which  appeared  to  require  meta— knowledge 
equivalent  to  one  that  does  not® 


be  true  or 
can  be  known 
either  known 
the  original 
is  provably 
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Again*  it  is  important  to  stress  that  this 
to  the  knowledge  language  for  PL  but  will  not 
with  FOPC*  In  the  latter  case*  there  will  be 
sentence  that  does  not  (and  should  not)  reduce 
knowledge  sentence* 


reduction  applies 
work  when  dealing 
a  me t a— knowl edge 
to  a  simple  world 


3*4*2  Modal  Logic 

I  will  now  compare  the  axiomatlzatlon  of  KPL  to  the 
treatment  of  knowledge  as  found  in  [Moore  80 ] »  [McCarthy  et  al • 
783  and  others  which  derives  from  the  work  of  Eintikka  [Hintikka 
62]  and  is  based  on  modal  logic* 


To  facilitate  the  comparison*  I  will  first  of  all  present  an 
alternate  axioma tiza tion  of  KPL  that  is  more  in  the  spirit  of 
modal  logic*  then  prove  it  equivalent  to  the  one  already 
presented* 

Axioms 

Al *  A 2  *  A3  and 

KMP*  K(a=>p)  (Ka=Kp) 

KC1.  Ka  =>  -»K-.a 

KC2.  K( Ka  =  a) 

K4.  Ka  o  KKa 

K5 •  iKa  =5  K-«Ka 

Rules  of  Inference  MP  and 

KG*  From  a*  to  infer  Ka* 

To  avoid  confusion,  I  will  let  J  h-  stand  for  the  new  provability 

rela  tion • 

Lemma  1^  If  |  H-  (a  =  Ka),  then  |  H  ( -»a  =  K-»a )  • 

Proof  I  1 •  a  =  K a 

2*  Ka=-»K-»a 
3*  K*»a=>~»a 
4*  -*Ka=>K-»Ka 
5*  K  ( -»Ka  =>-»a  ) 

6*  K-iKa=>K-«a 
7  •  -»a=>K -»a 
8-  -i  a- K-»  a 


Assumption 

KC. 

1, 2, PL 
K5 
1 ,  KG 

5 , KMP , MP 
1,4, 6, PL 
3, 7, PL 
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Lemma  2 
Proof ' 


if 

|  K  ( oc~  Ka )  and  |»-(P“Kp)s 

then  j  H(  a^p)  —  K  ( a=>p)  * 

1  * 

a=Kcf 

Assumpti on 

2. 

p-Kp 

Assumption 

3* 

“»a?™K^so 

1 ?  Lemma  1 

4  e 

K-*a  n  K{  a^p) 

PL?  KG 

5  © 

3  K(asp) 

3?  4?  PL 

6  © 

Kp  ^  Ktcgsp) 

PL?  KG 

7  ® 

P  =>  K(«3p| 

2?  6? PL 

8  ® 

(«3p)  =  K (a^p) 

5? 7? PL 

9.o 

K  (a=»p)  s  KanKp 

KMP 

10® 

Kia^p)  ^  (®3pl 

9  ? 1 ?  2  ?PL 

11® 

(a^pj  =  K(aspj 

8? 10, PL 

Lemma  3  If  a  is  pure?  then  Jh  ia~Ka) • 

Proof  *  by  induction  on  the  length  of  a*  The  lemma  clearly  holds 
for  primitives  since  they  are  not  pure*  If  -®a  is  pure?  then 
so  is  a  and  by  induction  ( ct~  Ka )  *  So?  by  lemma  1?  ( -ia=K-»a )  « 
If  (asp)  is  pure?  then  do  are  a  and  p  and  by  induction 
(a=Ka)  and  ( p—  Kp )  «  So?  by  lemma  2?  ( asp ) =  K ( a^p ) •  Finally? 
Ka=KKa  by  the  axioms  K4  and  KC2* 


Theorem  H  a  iff  |h  a® 

Proof  of  if:  by  induction  on  the  length  of  the  derivation  of  j  *- 

a •  If  a  is  an  axiom?  then  if  it  is  Al?  A2?  or  KMP?  then  I-  a 
since  these  are  also  axioms  of  the  H  relation*  If  a  is  an 
instance  of  KCl?  then  H  a  by  theorem  6  of  section  3*3*3*  If 

a  is  an  instance  of  KC2?  then  H  a  by  theorem  5  of  section 

« 

3*3*3*  If  a  is  an  instance  of  K4  or  K5?  then  I-  a  by  MK*  If 
a  follows  from  ( p=>a )  and  p  then  H  a  by  induction  and  modus 
ponens<  If  a  is  of  the  form  Kp  and  follows  from  p  by  KG? 
then  H  p  by  induction  and  so  H  K p  by  theorem  3  of  section 
3  *  3  •  3  • 

Proof  of  only  if:  by  induction  on  the  length  of'  the  derivation 

of  l-  a  •  If  a  is  Al  ?  A2?  A3  or  KMP?  then  |  l-a  since  these  are 
also  axioms*  If  a  is  KA1?  KA2?  or  KA3?  then  |Ha  using  the 
rule  KG*  If  a  is  an  instance  of  MK?  then  jHa  by  lemma  3* 
Finally?  the  rule  MP  is  also  a  rule  of  |l-* 
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Using  "this  axionatization  of  KPL  ,  the  correspondence  between 
KPL  and  modal  logic  is  clear!  treating  K  as  the  necessity 
operator,  we  have  the  modal  logic  S5  except  that  the  Axiom  of 
Necessity,  N,  has  been  replaced  by  the  weaker  conditions  KC1  and 
KC2*  Of  course,  reading  the  K  as  "necessary"  is  somewhat  strange 
without  N*  But  viewing  KPL  as  a  modified  S5  does  explain  the 
reduction  theorem  of  the  previous  subsection  since  the  same 
reduction  applies  to  S5*  Another  advantage  of  this  alternate 
axioma tization  is  that  it  decouples  consistency  (KC1)  from 
closure  (K4,  K5 ,  KC2)«  It  therefore  becomes  trivial  to  devise  a 
language  like  KPL  but  without  the  assumption  that  every  KB  is 
consistent • 

The  major  difference  between  my  formalization  and  Moore's 
(or  Hintikka' s)  is  the  fact  that  mine  has  K5  and  does  not  have  N • 
Of  course,  both  KC1  and  KC2  are  theorems  in  their  systems  since 
they  are  implied  by  N*  My  theory  is  simply  less  constrained  in 
that  it  allows  for  counter-factual  knowledge  bases* 

On  the  other  hand,  it  is  constrained  by  the  presence  of  K5 • 
Moore  presents  an  argument  against  K5  that  goes  roughly  as 
follows*  Suppose  someone  mistakenly  believes  p,  so  does  not  know 
p*  It  is  very  unlikely  that  he  would  know  that  he  does  not  know 
p  since  he  thinks  p  is  true*  The  argument  rests  on  the 
assumption  that  everything  known  is  true,  that  is,  on  N*  Indeed, 
the  argument  does  not  go  through  when  "know"  is  replaced  by 
"rationally  believe"  or  some  such  without  the  connotation  of 

truth • 

The  argument  made  by  Hintikka  against  K5  is  more  subtle*  In 
essence,  we  are  asked  to  think  in  terms  of  possible  worlds  so 
that  the  following  constraint  is  satisfied!  something  is  known 
exactly  when  it  is  true  in  all  possible  worlds  consistent  with 
what  is  known*  Now  suppose  p  is  not  known  due  to  a  lack  of 
information  of  some  sort.  The  fact  that  p  could  be  known  by 
acquiring  that  information  means  that  it  is  possible  for  p  to  be 
known  without  contradicting  what  is  known*  Consequently,  in  some 
possible  world  consistent  with  what  is  known,  p  is  known.  Thus, 
it  is  not  the  case  that  in  all  possible  worlds  consistent  with 
what  is  known,  p  is  not  known  and  so  the  KS  axiom  is  untenable* 
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The  trouble  with  this  argument  is  that  it  depends  on  the 
notion  of  a  possible  world*  If  p  is  not  known*  it  is  certainly 
possible  (consistent  with  what  is  known  I  that  it  be  known® 
However,  ray  interpretation  of  the  elements  of  a  model  description 
is  not  as  the  set  of  all  worlds  that  might  be  possible  given  what 
is  known?  but  the  set  of  all  worlds  that  might  be  the  actual 
world  given  what  is  known*  If  p  is  not  known?  then  by  K5?  the 
meta^knowledge  is  not  that  p  cannot  be  known?  but  that  it  ijs  not 
known©  It  is  the  ^possible"  in  possible  worlds  that  leads  to  the 
undesirable  interpretation  of  K5  while?  clearly,  KPL  has  no 
notion  of  either  possibility  or  necessity©  So?  if  knowledge  is 
to  be  treated  in  terms  of  a  possible  world  semantics?  some  care 
is  required  to  distinguish  between  the  two  modalities© 


/ 


In 


CHAPTER  4 

A  FIRST  ORDER  KNOWLEDGE  LANGUAGE 


4* 1  The  First  Order  Language 
4*1*1  Axiomatization 
4*1*2  Semantics 
4*2  The  Knowledge  Language 
4e  2 . 1  Semantics 
4*2*2  Axiomatization 
4*3  Properties  of  the  Formalization 
4*3*1  Soundness 
4*3*2  Completeness 
4*3*3  Maximal  Set  Theorem 

4*3*4  Irreducibility  and  Undecidability 
4*4  Equality 

4*4*1  Universal  Generalization 
4*4*2  Semantics  and  Axiomatization 
4*4*3  The  Knowledge  Language 
4*4*4  Discussion 
4*5  Singular  terms 

4*5*1  Semantics  and  Axiomatization 
4*5.2  The  Knowledge  Language 
4*5*3  Terms  Without  Equality 


this  chapterf  the  development  of  chapter  three  is 

propositional  to  a  first  order  language* 


generalized  from 


a 
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There  is  a  close  parallel  between  the  properties 
languages  and  the  presentation  will  often  appeal  to 
chapter*  The  emphasis  will  be  primarily  on  the 
between  the  two  cases  and  the  new  issues  that 
treatment  of  a  first  order  language* 


of  the  two 
the  previous 
dif f erenc es 
arise  in  the 


In  the  first  section,  a  particular  dialect  of  a  first  order 
language,  called  FOPC,  is  introduced  and  a  semantic  and  proof 
theoretic  view  of  the  language  is  presented©  In  the  next 
section,  the  knowledge  version  of  this  language,  called  KFOPC,  is 
defined  along  with  its  semantics  and  proof  theory*  The  step  from 
FOPC  to  KFOPC  is  exactly  analogous  to  the  step  from  PL  to  KPL® 
Section  three  is  the  heart  of  the  chapter  and,  in  many  ways,  the 
heart  of  the  thesis*  It  contains  some  of  the  major  technical 
results  of  the  thesis  related  to  the  formal  properties  of  KFOPC* 
The  final  two  sections  deal  with  modifications  to  FOPC  involving 
an  equality  predicate  and  non-rigid  terms  respectively  and  what 
impact  these  features  have  on  the  semantics  and  proof  theory  of 
KFCPC. 


The  net  result  of  this  chapter  is  an  analysis  of  a  language 
that  can  talk  about  the  knowledge  represented  in  a  first  order 
KB©  In  some  sense,  the  theorems  of  the  language  define  what 
properties  must  be  satisfied  by  a  first  order  KB.  There  is  no 
discussion,  however,  of  how  such  a  language  could  be  used  to 
query  or  define  a  KB;  this  is  the  topic  of  the  next  chapter* 
The  chapter  can  thus  be  viewed  in  two  ways s  it  is  an  analysis  of 
KBs  within  a  logical  language  or  an  analysis  of  a  language  that 
can  be  applied  to  the  definition  and  examination  of  KBs* 


The  development  of  the  languages  in  this  chapter  is 
characterized  by  a  set  of  linguistic  symbols  called  parameters 
which  are  neither  variables  nor  regular  constants*  For  FOPC, 
they  play  the  role  of  free  variables  in  formulas  without  the 
problem  of  the  collision  of  quantifiers  as  in  [Smullyan  68]* 
What  is  different  here,  however,  is  that  for  KFOPC,  parameters 
play  the  role  of  standard  names  of  entities  in  the  domain  of 


di scourse 
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There  are  "two  semantic  assumptions  underlying  my  use  of 
parameters*  The  first  is  that  we  can*  without  loss  of 

generality,  restrict  ourselves  to  a  single  denumerable  domain  of 
discourse*  The  second  is  that  we  can  take  this  domain  to  be 
(isomorphic  to)  the  set  of  parameters*  In  the  first  section,  I 
show  that  these  assumptions  can  be  made  without  restricting  FOPC* 
In  the  third  section,  I  show  that  the  assumptions  must  be  made 
for  KFOPC. 

The  major  results  of  the  chapter  are  in  sections  three,  four 
and  five*  First  and  foremost,  I  present  soundness  and 

completeness  proofs  for  the  language  KFOPC  and  its  variants  with 
equality  and  terms*  The  Maximal  Set  Theorem  shows  that  the 
semantics  can  be  restricted  to  maximal  sets  without  violating  the 
soundness  or  completeness  of  the  logic*  I  also  demonstrate  that 
the  monadic  version  of  KFOPC  is  undecidable  and  that  the  dialect 
of  KFOPC  without  aeta— knowledge  is  less  expressive*  In  section 
four,  I  show  that  my  use  of  parameters  permits  a  simple  treatment 
of  equality  where  the  usual  properties  are  theorems  but  not 
axioms*  In  fact,  I  prove  that  the  Leibnitz  indi scernibi li ty  of 
identicals  is  a  theorem  and  that  this  is  compatible  with  there 
being  true  identity  sentences  that  are  not  known  to  be  true* 
Finally,  in  section  five,  I  provide  a  unifying  view  of 
quantification  that  treats  K  as  a  universal  quantifier*  The  net 
result  is  that  provability  for  one  dialect  of  KFOPC  is  equivalent 
to  first  order  provability* 

« 

4.1  THE  FIRST  ORDER  LANGUAGE 

The  first  order  language  I  will  use,  called  FOPC,  is  defined 
not  only  using  a  set  of  variable  and  predicate  symbols,  but  also 
using  a  set  of  symbols  N  called  parameters  * 

Defn  VR  is  a  countably  infinite  set  of  symbols  called  variables. 

Defn  For  each  i=C,l,2,..*,  PR(i)  is  a  countably  infinite  set  of 
symbols  called  the  predicate  symbols  of  arity  i. 

Defn  N  is  a  countably  infinite  set  of  symbols  called  parameters. 


The  use  of  parameters  here  is  similar  to  their  use  in  [Smullyan 
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68 ] *  although  they  will  also  have  properties  of  what  he  calls 
"constants'*®  The  idea  is  that  parameters  will  play  the  role  of 
free  variables  without  the  bothersome  trouble  of  the  collision  of 
quantifiers  ® 

Given  these  sets  of  symbols  and  the  usual,  set  of  logical 
symbols*  the  well  termed  formulas  of  FOPG  can  be  defined 

Defn  The  formulas  of  FOPC  form  the  least  set  such  that 
1®  If  el*  ek  e  VR  U  N  and  p  e  PRCk]*  then 

p(el*®®**ekj  is  a  formula® 

2®  If  x  e  VR  and  cl  and  p  are  formulas*  then 
=»a*  (as/j)  and  (xl  a  are  formulas® 

I  will  assume  the  usual  definition  of  free  and  bound  occurrences 
of  a  variable  in  a  formula  as  well  as  the  following: 

Defn  Suppose  a  i s  a  formula*  x  e  VR  and  n  €  N® 

The  formula  at£  x/n]  is  the  result  of  substituting  all  free 
occurrences  of  x  in  a  by  the  parameter  n« 

Finally*  I  use  the  term  sentence  to  denote  any  formula  of  FOPC 
that  contains  no  free  variables®  Since  we  have  parameters  at  our 
disposal*  from  here  on*  only  sentences  will  be  used  in  the  proof 
theory  and  semantics  of  FOPC®  Formulas  with  free  variables  are 
used  only  in  the  formation  of  sentences® 

4®1®1  Axiomatization 

The  proof  theory  for  FOPC  that  I  will  use  is  a  variant  of 
the  standard  one  based  on  [ Smullyan  68]®  Obviously*  the  axioms 
and  rule  of  inference  of  PL  are  present  since  FOPC  is*  among 
other  things*  a  propositional  logic® 

Axi oms  Al*  A2*  A3  and 

A4*  (x)  (a^p)  =5  (  (  x)  a=>  Cx)  p) 

AS®  (x)a  =  a[x/n] 

Rul es  o  f  Inference  MP  and 

UG®  From  a[x/n],  where  a  does  not  contain  n* 
to  i nf er  (x) a® 

The  use  of  parameters  is  apparent  in  the  rule  of  universal 
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generalization  ( UG )  where  we  are  allowed  "to  bind  all  occurrences 
of  a  parameter  using  a  variable.  The  proviso  that  the  formula 
not  contain  the  parameter  guarantees  that  all  occurrences  will  be 
bound  and  thus  blocks  "proofs"  of  the  following  form: 

1.  (x)p(xyx) 

2.  p ( n y  n )  1,A5,MP 

3.  (y)p(yfn)  2  f  Wrong  UG 

4.  (x)(y)p(y,x)  3»UG 

In  this  case,  one  would  be  able  to  conclude  that  p  holds  for  any 
two  elements  of  the  domain  from  the  fact  that  it  is  reflexive. 
Note,  howevery  that  UG  does  allow  a  proof  of  the  form? 

1.  r ( n ) 

2  *  ( x) r ( x )  ltUG. 

In  other  wordSy  If  the  formula  a(x)  has  one  free  variable  x  and 
does  not  contain  the  parameter  n,  then  we  do  have  that 

If  H  a(n)  then  l-  (x)a(x) 

Of  coursey  this  does  not  mean  that  if  a  is  true  of  n  that  it  must 
be  true  of  everything!  it  only  says  that  if  a(n)  is  a  theorem 
(i.e.  a  is  logically  true  of  n)  then  (x)a  is  also  a  theorem. 
The  reason  for  this  is  that  there  is  nothing  special  about  the 
parameter  n!  if  something  can  be  proven  about  nf  then  the  proof 
can  be  duplicated  for  any  other  parameter  and  so  the  universal 
generalization  is  warranted.  In  f act y  the  rule  UG  might  have 
been  specified  by 

UG*.  If  for  every  n  H  a[x/n]y  then  l-  (x)a. 

This  is  perhaps  closer  to  the  intuitive  intent  in  generalization 
but  it  would  mean  abandoning  the  notion  of  a  finite  proof.  A 
proof  might  now  require  an  infinite  number  of  sentences  (for 
exampley  a  tree  of  finite  depth  but  possibly  infinite  breadth). 

One  final  point  concerning  the  axioma t ization  of  FOPC 
involves  how 

S  I—  at  where  S  c  FOPC 

is  to  be  interpreted-  If  this  means  there  is  a  proof  of  a  using 
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sentences  of  S  as  postulates?  then  we  get  that?  for  example? 

Cr(n,)}  H  (x)r(x) 

and  so 

(r  (  n  1 )  ?  =«r  (  n2  J  }  H  any  sentence® 

A  more  convenient  interpretation  for  our  purposes  is  that  S  and 
-so  are  Inconsistent  I 

Notation  <a  1  ?  ©  «  *  ?  ak>  =  (  o2^  C  ®  «  ®  (  ak—  l3cski)  ®  ®  ®  ) 

Defn  A  set  S  is  inconsi stent  iff  there  is  «l?*e®?a?k  e  S 
such  that  H  <ol  ?  ®  ®  ®  ?  ok-1  ?-*ok> 

Defn  SHo  iff  £-«a3  is  inconsistent® 

Note  that  this  definition  applies  equally  well  to  finite  or 
infinite  sets® 


4*1® 2  Semantics 

Turning  now  to  the  semantics  of  FOPC?  there  are  at  least  two 
ways  to  proceed:  one  way  is  to  follow  the  standard  Tarskian 
paradigm  and  talk  about  a  domain  of  discourse?  sequences  of 
domain  elements?  satisfaction  and  finally  truth  and  validity;  an 
alternate  method?  and  the  one  I  will  use?  Is  to  talk  about  truth 
value  assignments  directly  and  inquire  about  what  kinds  of  world 
descriptions  and  interpretation  functions  are  required  to  produce 
all  and  only  these  assignments*  This  second  approach  is  more  in 
keeping  with  the  development  in  chapter  three  for  the 
propositional  case* 

In  the  standard  Tarskian  framework  (see?  for  example 
[Mendelson  64]) ?  an  interpretation  is  a  pair  <D?V>?  where  D  is 
some  set  and  V  assigns  an  n— ary  relation  over  D  to  each  n— ary 
predicate  symbol  (and  perhaps  an  element  of  D  to'each  parameter) • 
One  important  property  of  this  definition  of  interpretation  is 
that  it  is?  in  some  sense?  too  general  for  FOPC*  The  idea  is 
that  only  certain  equivalence  classes  of  interpretations  are 
requi r  ed • 

Defn  Let  si  and  s2  be  (Tarskian)  interpretations*  si  is 
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eguival ent  to  s2  iff  every  sentence  has  the  same  truth  value 
in  si  and  s2« 

So*  two  interpretations  are  equivalent  when  they  are 
linguistically  indistinguishable.  In  other  words*  there  is  no 
way  "to  distinguish  in  FOPC  between  equivalent  interpretations* 
The  important  property  here  (which  is  a  variant  of  the 
Skolen-Lowenheim  theorem)  is  the  following: 

Proposition  Let  s  be  any  interpretation.  Define  <N,V>  to  be 

the  interpretation  whose  domain  is  the  parameters  where 
V(p)  —  (<nl , »..,nk>  J  plnlf.. . ,nk)  is  true  in  s] 

V( n )  =  n • 

Then*  s  is  equivalent  to  <N,V>. 

Thus,  for  any  interpretation,  there  is  an  equivalent  one  (which  I 
will  call  normal )  whose  domain  is  N  and  which  assigns  the 
parameters  to  themselves  (if  it  assigns  parameters  at  all).  So 
although  we  might  intend  to  talk  about  people,  tables,  numbers 
and  sets  in  FOPC,  anything  we  say  can  be  understood  as  if  all  we 

were  talking  about  was  the  parameters  themselves.  Moreover, 

% 

there  is  no  way  in  FOPC  to  clear  up  this  confusion  by 
distinguishing  between  the  two  interpretations.  In  addition, 
normal  interpretations  themselves  can  never  be  confused  since 
within  the  set  of  normal  interpretations,  a  normal  interpretation 
is  equivalent  only  to  itself.  Hence,  for  any  two  distinct  normal 
interpretations,  there  will  be  a  sentence  of  FOPC  that  has  a 
different  truth  value  in  each  interpretation. 

The  degrees  oi  freedom  allowed  by  normal  interpretations  are 
precisely  the  range  allowed  by  the  language  FOPC  itself.  If  we 
insist  on  thinking  about  FOPC  as  making  reference  to  entities 
other  than  the  parameters,  then  we  are  simply  presuming  a 
me ta* 1 ingui s t ic  bijection  between  N  and  these  entities.  In 
particular,  we  can  understand  normal  interpretations  as  dealing 
with  some  countable  set  of  entities  U  where  the  kth  parameter 
stands  for  the  kth  element  of  U.  We  are,  however,  committed  to 
all  of  U  no  matter  what  the  interpretation.  In  some  sense,  the 
question  as  to  what  "exists”  is  not  answered  with  respect  to  an 
interpretation  since  it  is  fixed  once  and  for  all.  Of  course. 
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what  people  or  tables  or  prime  numbers  exist  will  depend  on  the 
In terpre tati on  of  the  predicate  symbols?  so  the  question  of 
existence  or  non-existence  has  simply  been  relativizedc  This  is 
perhaps  a  good  indication  that  quantification  should  be  "typed" 
fusing  single  place  predicates)  but  I  will  not  pursue  the  point 
here  © 


Given  the  above  analysis ?  the  semantics  of  FOPC  can  be  kept 
quite  simple©  In  particular?  a  world  description  will  only  have 
to  deal  with  the  predicate  symbols  as  applied  to  the  parameters© 
These  are  the  primitive  sentences  of  FOPC© 

Defn  PRIM  =  CpC n 1 ? © « « ? nk)  |  ni  e  N  and  p  c  PR(kl) 


There  is  really  no  point  in  retracing  the  definitions  of  world 
descriptions  from  the  propositional  case?  since  the  development 
is  obvious* 

Defn  WD  =  [PRIM  -»  (T*F}  ]  as  in  the  propositional  case© 


The  i 

Defn 


n terpre tati on  function  for  FOPC  is  the  following! 

I  c  £  FOPC  *  WD  -  £T  ?  F)  ]  is  defined  by 
1©  I(p,si  =  s(p)  if  p  e  PRIM 
2*  I  ( “•<*»  s )  =  T  if  I(a,s)  =  F 
='  F  otherwise 

3®  I(«3p?s)  =  T  if  KofS)  =  F  or  I(p*s)  =  T 

=  F  otherwise 

4©  If(x)cKfS)  =  T  if  for  all  n  e  N?  I(a£x/n]»s) 

=  F  otherwise© 


T 


Note  that  ray  “substitutional"  interpretation  of  quantification  is 
justified  by  the  assumption  that  the  domain  of  discourse  is 
(isomorphic  to)  N*  As  with  the  propositional  case?  two  world 
descriptions  are  identical  iff  they  agree  on  the  interpretation 
of  every  sentence*  The  generalization  to  allow  "for  truth— value 
gaps  poses  no  special  difficulty*  Under  the  weak  interpretation? 
rule  4  above  would  be  rewritten  as 


4*  I ( ( x ) a t s )  =  T  if  for  every  n?  I (a[x/n]ts)  =  T 

=  F  if  for  some  n?  I(a[x/n]?s)=  F. 

=  *  otherwise* 
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The  corresponding  strong  interpretation  would  be 

4.  I((x)a*sJ  =  *  if  for  some  n*  I  I  a[x/n  ],s)  =  *. 

=  T  if  for  every  n,  I(a[x/n]*s)  =  T. 

=  F  otherwise 

I  will  take  for  granted  that  the  valid  sentences  here  are 
precisely  those  that  are  valid  in  the  standard  Tarskian  account 
(at  least  for  sentences  containing  no  parameters)  and*  moreover* 
that  my  axioma ti za t ion  is  both  sound  and  complete  with  respect  to 
this  semantics  ( see  section  three  on  the  soundness  of  the  rule 
UG.)  • 


4.2  THE  KNOWLEDGE  LANGUAGE 

In  this  section*  I  will  consider  the  definition  of  the 
language  KFOPC*  that  is*  the  knowledge  language  based  on  FOPC. 
Most  of  the  issues  here  are  directly  related  to  those  of  KPL  with 

the  modifications  arising  from  FOPC.  For  example*  as  with  KPL, 

0 

the  language  KFOPC  includes  all  of  FOPC  as  a  subset. 

Def n  The  formulas  of  KFOPC  form  the  least  set  such  that 

1.  Every  element  of  PRIM  is  a  formula  of  KFOPC. 

2.  If  a  and  p  are  formulas  of  KFOPC, 

then  so  are  -*a,  (a=>p),  (x)a  and  Ka 

The  K  connective  here  is  intended  to  be  read  the  same  way  it  was 
for  KPL  in  that  Ea  means  a  is  known  to  be  true. 


4.2.1  Semantics 

The  interpretation  of  sentences  of  KFCPC  will  parallel  very 
closely  those  of  KPL  with  the  added  notion  of  quantification 
arising  from  FOPC.  Sentences  of  KFOPC  may  or  may  not  be  pure 
(with  respect  to  the  new  set  PRIM)  so  that  both  a  model  and  world 
description  are  necessary  for  the  interpretation.  As  in  the 
propositional  case,  model  descriptions  will  consist  of  non-empty 
sets  of  world  descriptions.  However*  it  is  convenient  at  this 
stage  to  be  able  to  use  any  set  of  world  descriptions  as  a  model 
description  and  not  just  the  maximal  ones.  In  the  next  section* 
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I  will  prove  that  the  semantics  can  be  restricted  to  maximal 
sets  t  but  for  now?  we  have  the  following  temporary  definition? 

Temporary  De f n  MD  =  Cm  c  W D  |  m  is  non-empty} 

Given  a  definition  of  MD?  however,  the  definition  of  the 
interpretation  function  V  is  straightforward? 

Defn  V  e  £ KFOPC  *  WD  *  MD  -  £T?F}  }  is  defined  by 

1®  V{a,s?i<*)  =  s(a)  if  a  €  PfilM 
2®  VC-*a»s?ra)  =  T  iff  V(of?s?m)  "  F 

3®  VCa3p,s,mj  =  T  iff  Vi  £r,s,i»i  =  F  or  V(pfs#m)  =  T 
4®  VC(x|a?s?m)  =  T  iff  for  every  n,  VCaCx/n]  ,s,ia)  =  T 
5®  V(£a,s,m)  =  T  iff  for  every  s®  t  n,  V(afs#?m)  —  T# 

A  sentence  is  valid  when  it  is  interpreted  as  true  with  respect 
to  any  world  or  model  description  and  sa tisf iabie  when  its 
negation  is  not  valid®  I  will  occasionally  use  the  notation 
V ( a , m )  to  denote  the  truth  value  of  a  pure  sentence® 

The  definition  of  V  follows  directly  from  the  semantics  of 
KFL  and  FOPC®  However,  the  interaction  between  these  two 
languages  does  allow  us  to  distinguish  between  "knowing  what"  and 
"knowing  that".  Suppose,  for  example,  we  have  in  Pfi(l)  a 
predicate  AgeOf John  intended  to  be  true  of  a  parameter  n  only  if 
n  is  the  age  of  John  in  years  (treating  parameters  as  numbers)® 
So  the  formula 

( Ex) AgeOf John(x) 

expresses  the  fact  that  John  has  an  age  while  the  sentence 

(1)  K[ (Ex)AgeOf John(x) ] 

expresses  the  proposition  that  it  is  known  that  John  has  an  age® 
This  is  to  be  contrasted  with  the  sentence 

(2)  (Ex) K[ AgeOf John( x )] • 

The  sentence  (2)  will  be  true  iff  for  some  parameter  n  the 
sentence 

K[ AgeOf J  ohn ( n)  ] 


is  true®  In  other  words,  (2)  is  true  precisely  when  the 


re  is  an 


Page  4—11 


n  such  t  hat  i  t  is  known  that  "the  (ox*  y  more  accurately*  an)  age  of 
John  is  n.  Notice,  moreover,  that  knowing  what  John’s  age  is 
does  indeed  imply  knowing  that  he  has  an  age  in  that  for  any  at, 
the  sentence 

(3)  ( Ex) Ka  3  K ( Ex )a . 

is  valid*  The  converse  is,  of  course,  not  valid®  For  example, 
consider  the  model  description  defined  by 

m  =  (s  j  s[ AgeOf John! nl )  ]  =  T  or  s(AgeOf John ( n2)  ]  =  T)  . 

In  this  case,  m  describes  a  KB  where  it  is  known  that  John's  age 
is  either  nl  or  n2  and,  therefore,  that  John  has  an  age*  On  the 
other  hand,  the  KB  does  not  know  what  John's  age  is  since  it 
could  turn  out  to  be  either  nl  or  n2* 

Before  presenting  the  proof  theory  of  KFOPC,  it  is  worth 
re-examining  my  assumptions  regarding  the  single  universal  domain 
of  discourse  and  the  treatment  of  parameters  in  the  context  of 
KFOPC. 


If  we  drop  for  a  moment  the  assumption  regarding  the  single 
domain  of  discourse,  the  question  that  immediately  arises  is  what 
the  domain  of  quantification  should  be  for  a  sentence  like  (2)* 
Since  we  also  want  to  interpret  sentences  like 

( Ex )  ( q ( x )  a  Kp( x )  ] 

it  appears  that  the  domain  should  be  the  domain  of  discourse  of 
the  world  under  consideration,  that  is,  the  same  domain  used  to 
interpret 

( Ex) q ( x)  • 

The  trouble  with  this  is  that  (2)  is  no  longer  really  pure  in 
•that  its  truth  value  now  depends  on  the  world  description  as  well 
as  the  model  description.  Consequently,  there  is  no  way  to  state 
that  the  KB  knows  what  John' s  age  is  without  making  reference  to 
the  (domain  of  the)  actual  world.  But,  more  importantly,  even  if 
there  is  some  entity  o  that  has  the  properties 

—  for  each  s  €  m,  o  is  in  the  domain  of  s 

-  for  each  s  €  m,  AgeOfJohn  holds  of  o  in  s 
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(2)  may  still  be  false  since  ©  may  fail  to  be  in  the  domain  of 
the  actual  world®  In  fact,  we  would  have  no  way  to  express  this 
situation  even  though  it  corresponds  as  closely  as  anything  to 
knowing  John1 s  age®  In  some  sense,  without  a  universal  domain, 
we  lose  the  ability  to  talk  about  "knowing  what®'  without  also 
making  a  statement  about  the  world® 

Even  if  the  assumption  about  a  single  universal  domain  is 
made,  we  might  still  want  to  consider  a  different  treatment  of 
the  parameters®  The  assumption  I  have  made  so  far  is  that  there 
is  a  fixed  isomorphism  between  the  parameters  and  the  universal 
domain®  If  we  temporarily  drop  this  assumption  we  can  allow  the 
mapping  between  parameters  and  entities  to  be  a  function  of  the 
world  under  consideration  much  like  the  standard  treatment  of 
constants®  In  this  case,  a  world  description  assigns  both 
predicate  symbols  and  parameters,  as  in  a  standard  Tarskian 
structure i 

For  each  n  e  N,  s(n)  e  U 

For  each  p  e  PR(kl,  s(p)  c  U  *  U  *  •••  *  U 

The  first  thing  to  notice  about  this  proposal  is  that  we  can  no 
longer  treat  quantification  in  terms  of  parameter  substitution 
since  the  referents  of  the  parameters  under  some  interpretation 
may  not  exhaust  U,  the  domain  of  discourse®  The  standard 
Tarskian  account  does  the  job  here  for  FOPC®  But  consider  its 
generalization  to  KFOPC  and  sentences  like  (2)  in  particular®  It 
might  seem  that  the  correct  interpretation  is  provided  by 

V£ ( Ex) Kp { x) , m ]  =  T  iff  there  is  a  u  e  U  such  that 

for  every  s  e  m,  p  holds  of  u  in  s  (i«e®  u  e  s(p)) 

In  fact,  this  is  probably  the  only  reasonable  non— substitutional 
interpretation®  It  does,  however,  have  a  very  serious  problem 
and  that  is  that  it  leads  to  the  validity  of 

(4)  (  Ex  )  Ka  =>  K  Lx)  a 

which  states  that  the  only  way  something  can  be  known  to  have  the 
property  a  is  when  it  is  known  that  everything  has  this  property® 
The  proof  of  this  somewhat  unexpected  and  undesirable  property  of 
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the  standard  interpretation  of  quantification  is  deferred  to 
section  4*3*3  (  theorem  2i)  since  it  does  require  the  exact 
definition  of  what  constitutes  a  model  description*  Intuitively, 
the  reason  (4)  is  vaiid  is  that  there  is  no  longer  any  way  to 
make  sure  that  a  KB  knows  an  a  without  telling  it  that  everything 
is  an  a*  It  is  no  longer  sufficient  that  for  some  n  the  sentence 

Kp(  nj 

be  true  for  it  also  to  be  true  that 

(  Ex  )  Kp  (  x  )  * 

The  reason  for  this  is  that  what  n  refers  to  may  change  from 
world  to  world  and  so  there  need  not  be  an  eJLement  of  U  that 
satisfies  the  property  in  every  world*  In  fact,  the  sentence 

(5)  Kp(n)  =>  (Ex)Kp(x) 

is  no  longer  valid*  However,  once  you  fix  the  mapping  from 
parameters  to  entities  once  and  for  all  (that  is,  once  parameters 
are  understood  as  ”rigid  designators”  [Kripke  72]),  there  is  a 
way  to  have  a  known  a  without  knowing  that  everything  is  a  since 
(5)  is  valid*  This  does  not  mean,  of  course,  that  every  term  in 
the  language  has  to  be  rigid*  In  section  five,  I  will  show  how 
non-rigid  terms  can  be  accomodated* 

To  summarize,  then,  both  the  assumption  of  the  universal 
domain  of  discourse  and  the  treatment  of  parameters  are  necessary 
in  the  language  KFOPC  and  any  deviation  from  these  two  has 
undesirable  side— effect s • 


4*2*2  Axiomatiza ti on 

To  consider  a  proof  theory  for  KFOPC,  I  will  use  as  a 
heuristic  the  discussion  from  section  3*4*1*  In  particular,  I 
want  to  say  that 

1*  The  axioms  and  rules  of  inference  of  FOPC  are  present* 

2*  The  axioms  of  FOPC  are  known  and  the  rules  of  inference 
of  FOPC  can  be  applied  to  what  is  known* 
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3*  Meta-knowledge  ia  accurate  and  complete* 

The  only  minor  difficulty  here  is  hor  to  express  as  an  axiom  the 
fact  that  the  rule  UG  can  be  applied  t©  what  is  known*  The 
corresponding  case  with  MP  (modus  ponens)t  called  KMP*  was 
written  as 

KCasp)  ^  (Ka^Kp! 
and  derived  from 

If  H  iot^p)  then  if  H  a  then  H  po 

Since  the  rule  for  universal  generalization  can  be  expressed  as 

If  •-  a£x/n]  then  H  (x;)a  with  proviso 

it  might  appear  that  the  corresponding  axiom*  K UG »  should  be 

Cl)  Ka ( x/ n ]  3  K(x! a  with  proviso* 

However*  the  trouble  with  this  is  that  given  (1)  and  the  axioms 
and  rules  of  FOPC*  we  obtain  as  a  theorem 

(Ex)Kp(x)  3  KCx)p(x) 

which  is  precisely  what  we  have  tried  to  avoid  as  being  valid  in 
the  previous  section*  So  *  unless  we  want  that  whenever  some  thi ng 
is  known  to  be  a  then  it  is  known  that  everything  is  a*  (1) 
cannot  be  used  to  state  that  a  KB  can  do  universal 
generalization*  In  fact*  what  we  want  is  that  whenever 

everything  is  known  to  be  a  then  it  is  known  that  everything  is 
a*  So  the  universal  generalization  we  need  is  the  one  written 
earlier  as  UG#: 

If  for  every  n  H  a£x/n]  then  I-  (x)a 
Thus,  the  correct  version  of  KUG  becomes 
(  x )  Ka  3  K  ( x  )  a  • 

Looked  at  somewhat  differently*  what  we  are  saying  is  that  Ka 
should  not  really  be  thought  of  as  saying  that  a  follows  from 
what  is  known  but  rather  that  is  inconsistent  (in  the  sense  of 

section  one)  with  what  is  known*  In  the  case  of  a  propositional 
logic  there  is  no  distinction  because  of  the  deduction  theorem; 
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in  a  first  order  logic  the  distinction  does  exist  and  it  is  the 
second  interpretation  we  want*  At  any  rate,  given  the  correct 
choice  for  KUG,  the  axi omatiza tion  of  KFOPC  becomes: 

Axioms  Those  of  KPL,  A4,  A5  and 

KA4.  K{  (  xj)  ( a=>p)  (  (x)a=>(  x)p)  ] 

KA5  •  Kt  (x)  a  =>  at[x/n]] 

KUG.  (x)Kcr  =  K  (  x  )  a 
Rui es  of  Inf  ere  nee  MP  and  UG. 

Again y  the  only  suprising  thing  here  is  KUG  which,  in  modal  logic 
terms,  is  the  controversial  Barcan  formula  [Hughes  and  Cresswell 
72].  It  should  be  noted,  however,  that  once  the  assumption  of  a 
single  universal  domain  is  made,  there  is  really  no  alternative 
to  this  formula.  This  is  quite  evident  in  the  semantic 
characterizations  presented  in  [Hughes  and  Cresswell  72].  It 
also  occurs  in  the  formalization  of  knowledge  in  [Moore  80]  where 
a  universal  domain  is  also  assumed  (although  Moore  himself  does 
not  mention  this  fact).  Moreover,  it  is  easy  to  present 
alternatives  to  KUG  that  appear  to  address  the  universal 
generalization  issue  more  directly: 

Theorem  The  following  are  equivalent  in  the  proof  theory  of 

xfopc: 

1.  KUG  as  an  axiom. 

2.  A  rule:  From  Ka[x/n]  to  infer  K(x)a  with  proviso. 

3.  A  new  axiom:  K(x)  (KoPa)  . 

Here,  (2)  makes  the  universal  generalization  going  on  quite 
explicit  while  (3)  appears  to  be  obvious  given  that  K(Ka^a)  is  a 
theorem  of  KPL  ( see  section  3.3.3) . 

P roof  Cons ider  the  transi t i on s  from  ( 1 )  to  (2)  to  (3)  to  (1). 

(1)  to  (2).  Suppose  Ka[ x/n ]  is  a  theorem  where  n  does  not  appear 

in  a.  By  UG,  (x)Ka  is  a  theorem  and  so  by  KUG  and  MP ,  K ( x ) a 
is  also  a  theorem. 

(2)  to  (3).  From  the  propositional  case,  we  have  that  K(Ka=a)  is 

a  theorem  for  any  sentence  a.  Let  a  be  any  formula  with  at 
most  one  free  variable  x  and  n  any  parameter  not  in  a. 
Since  K  ( Ka=a )  [  x/n  ]  is  a  theorem,  by  (2),  so  is  K(x)(Ka=o:). 

(3)  to  (1).  From  (3),  K(x)(K  a=>a  )  is  a  theorem. 
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Thus  t  C  K  ( xj  Kaj^tKCx)  a]  is  provable  using  KA4®  But  by  MK, 

£  ( x)  Ka )  K(  x  )£a  ]  is  provable  and  so  by  regular  FOPC*  KUG  is 
a  theorems 

As  a  corollary  to  -this  theorem  we  have  the  followings 

Corollary  ( KNEC )  If  H  a  then  H  Ka« 

Proof*  by  induction  on  the  length  of  the  derivation  of  a  <* 

If  a  is  an  axiom*  then  if  it  is  one  of  Al  to  A5 *  then  Ka  is 
also  an  axiom;  if  it  is  one  of  the  other  axioms?  then  it  is 
pure  and  so  by  MK  Ka  is  a  theorem®  If  a  follows  from 
and  p?  then*  as  in  the  propositional  case*  Ka  is  a  theorem 
by  virtue  of  KMP®  Finally*  if  Cxla  follows  from  some 
a£x/n],  then  by  induction  Ka£x/n]  is  a  theorem  and  by  KUG 
(and  the  above  raeta- theorem!  K(x)a  is  a  theorem® 


4® 3  PROPERTIES  OF  THE  FORMALIZATION 

In  this  section*  I  will  present  some  of  the  formal 
properties  of  the  semantics  and  proof  theory  of  KFOPC®  In  the 
first  subsection*  I  will  prove  that  every  theorem  of  KFOPC  is 
valid  and*  in  the  next  subsection*  the  converse®  In  the  third 
subsection,  I  will  take  up  the  notion  of  maximal  sets  from 
chapter  three  and  prove  that  the  soundness  and  completeness 
results  continue  to  hold  when  the  semantics  is  restricted  to 
maximal  sets®  I  will  also  argue  that  maximal  sets  correctly 
individuate  knowledge  bases  and  that  they  force  a  substitutional 
account  of  quantification®  In  the  final  subsection,  I  will  prove 
that,  unlike  the  propositional  case,  the  language  KFOPC  is 
irreducible®  I  will  also  demonstrate  in  that  subsection  that  the 
monadic  version  of  KFOPC  is  undecidable® 


4®3®1  Soundness 

In  this  subsection  I  will  prove  that  my  axiomaf ization  of 
KFOPC  is  sound  in  that  every  theorem  of  KFOPC  is  valid®  I  take 
it  for  granted  that  the  axioms  Al ,  A2 ,  A3,  A4  and  A5  are  valid 
given  that  these  are  also  valid  in  FOPC •  Moreover,  because  of 
the  validity  of  these  axioms,  the  axioms  KA1 ,  KA2,  KA3,  KA4  and 
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KAS  are  also  valid*  Similarly*  "the  soundness  of  "the  rule  MP 
follows  from  its  soundess  in  FCPC  and  leads  to  the  validity  of 
KMP.  So  all  that  is  left  is  MX,  XUG  and  UG  itself. 

Lemma  _1  The  sentence  [(x)Ka  =  K(x)a]  is  vaJLid. 

Proof : 

The  first  sentence  is  true  iff  for  any  n  e  N  and  any  s  e  m 
V ( a [ x/ n ] , s , m )  is  T*  The  second  sentence  is  true  iff  for  any 
s  e  m  and  any  n  e  N  V( at x/n ] , s ,m )  is  T«  But  the  two 
conditions  are  identical* 

Lemma  2  If  a  is  pure  then  the  sentence  a=Ka  is  valid* 

Proofs  by  induction  on  the  length  of  a* 

If  a  is  primitive  then  the  lemma  holds  since  a  is  not 
pur  e  • 

Consider  a  sentence  -»a  •  If  -*a  is  pure,  then  so  is  a  and 
by  induction,  it  is  equivalent  to  Ka*  If  a  is  true  wrt  to  s 


and  m. 

then 

so  is 

Ka  and  so, 

for  some 

s  •  in 

m. 

a  is  true  and 

so  -■  K-ia 

is 

true  • 

Conversely , 

if  -»K-*a 

is  true. 

then  for  some 

s  * 

in  m 

t  oc 

and  Ka 

are  both  true  wrt  s* 

and 

m  • 

So  Ka  is  true 

wrt 

s 

and 

m  and 

thus,  a  is 

as  well • 

So  a 

is 

equivalent  to 

-iK-ta,  and  -»a  is  equivalent  to  K-»a  • 

If  (a=>p)  is  pure,  then,  by  induction,  a  is  equivalent  to 
Ka  and  p  is  equivalent  to  Kp*  If  (a^p)  is  true,  then  if  a 
is  false,  then  as  above,  X-»a  is  true;  if  p  is  true  then  Kp 
is  true*  Either  way,  K(a=>p)  is  true*  If,  conversely, 
K(a=>p)  is  true  wrt  s  and  m,  then  for  every  s'  in  m,  either  a 
is  false  or  p  is  true  wrt  s'  and  m*  Consequently  either  K-»a 
or  Kp  is  true  wrt  s*  and  m  and,  therefore,  wrt  s  and  m*  So, 
either  a  is  false  or  p  is  true  wrt  s  and  m  and  so  (  a=>p)  is 
true*  Thus,  (a=>p)  is  equivalent  to  Kla=>p)» 

If  (x)a  is  pure  then  so  is  a[x/n].  Suppose  (x)a  is  true; 
then  a [ x/n ]  is  true  for  every  n  and,  by  induction,  Ka[x/n] 
is  as  well.  Thus  ( x ) Ka  is  true  and,  therefore,  by  lemma  1, 
K ( x ) a  is  true*  If  (x)a  is  false  then  for  some  n  a[x/n]  is 
false  and  so  is  KaCx/n]  by  induction*  Thus,  (x)Ka  is  false 
and,  by  lemma  1,  so  is  K(x)a*  So,  (x)a  is  equivalent  to 
K ( x ) a  when  a  is  pure.  Finally,  consider  Ka •  This  is  true 
wrt  to  ra  iff  KKa  is  true  wrt  to  m. 
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Defn 

Deln 

Defn 


Let  G  e  [  N  -* 
G(«)  is  the  result 
by  G ( n ) » 

G®(s)  e  WD  defined 
Ge  (m)  c  WD  def ined 


N]. 

of  substituting  every  parameter  n  in  a 

by  G' (s) (p)  =  s(G(pj) 

by  G#  Cm)  =  (  G® ( si  |  s  €“  m  )  * 


Lemma  3  If  G  is  onto,  for  any  a,  ?(a,Gc  C  s>'  SG  *  (m)  )  =  V(G(a)  ys,m) 
Proofs  by  induction  on  the  length  ©f  a« 

If  a  is  primitive  then  the  lemma  holds  by  definition  of  Gs® 
The  lemma  holds  for  negation  and  material  implications  since 
GC=8«|  is  -»G(a)  and  G(  (  asa*  I  )  is  C  G(a  )  =>G  C  a  *  )  )  ®  Consider 

V  C  G  C  C  x  I  a  |  f  s  ,  rai)  ®  This  is  equal  to  V  (  { xl G  ( a )  *  s  T  mi  which  is  T 

iff  for  every  n  V(  G(  a)  [  x/n  3 ,  s*ra)  is  T®  Since  G  is  onto, 
this  is  exactly  the  same  as  saying  for  every  n 

V(G(a[x/nJ) , s,n)  is  T  which,  by  induction,  holds  iff  for 
every  n  V(a[ x/n] ,G* ( s) ,G* (m))  is  T«  This  last  is  true  iff 
V(  (x)a,G*  (s),G*  (m)  )  is  T*  Finally  consider  V(G(Ka)  ,s,ci)  • 
This  is  equal  to  V(EG(a) ,s,m)  which  is  T  iff  for  every  s®  in 
m  V(G(a)*s*  ,m)  is  I *  This  holds,  by  induction,  iff  for 

every  s*  in  m  V ( a  f G ( s 1 ) f G • ( ra )  )  is  T  iff  for  every  s®  in 
G • ( m )  V(a,s® ,G* (m) )  is  T  iff  V(  Ka  , G®  (  s)  ,G  •  (mj  )  is  T. 

Lemma  4  If  V(  at [  x/  n  *  ]  »  s  *  ,  m ®  1  =  F  and  n  does  not  appear  in  at 

there  is  an  s  and  an  m  such  that  V  (atx/n  ] ,  s,  ra)  =  F* 

Proof:  Define  G  as  follows: 

G( n)  =  n  * 

G  leaves  the  parameters  in  a  unchanged 

G  assigns  the  remaining  parameters  in  an  onto  fashion* 
Then  G(a[x/n])  is  crCx/n®]*  Thus  V  ( G  ( a  [  x/n  ]  )  t  s  ®  y  m®  )  is  F 

and,  letting  s  be  G •  ( s *  )  and  m  be  G*(m,)»  by  lemma  3, 

V(a[x/n],s,m]  is  F* 


Lemma  5  t  Soundne  ss  of  UG )  If  a[x/n]  is  vaJLid  where  n 
does  not  appear  in  at»  then  so  is  (x)a* 

Proof:  by  contradiction 

If  (x)a  is  not  valid  then  there  is  an  n®,s®  and  m®  such  that 
V(a[x/n® ],s® ,m® )  is  F*  But,  n  does  not  appear  in  a  so  by 
lemma  4f  there  is  an  s  and  ra  such  that:  V(a[x/n],s,a)  is  F 
and  so  at[x/n]  cannot  be  valid* 
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Theorem  ( Soundness)  Every  theorem  of  KFOPC  is  valid. 

Proof:  by  induction  on  the  length  of  the  proof. 

All  the  axioms  are  valid*  taking  into  account  lemma  1  (KUG) 
and  lemma  2  (MK) •  The  inference  rule  MP  clearly  preserves 
validity  and  by  lemma  5*  so  does  the  rule  UG  as  phrased. 

This  completes  the  proof  of  soundness. 


4.3.2  Completeness 

In  this  section  I  will  show  that  every  valid  sentence  of 
KFOPC  is  also  a  theorem  of  KFOPC*  The  method  I  will  use  involves 
a  Henkin  style  proof  (see  e.g.  [Hughes  and  Cresswell  723)  and 
consists  in  showing  that  every  finite  consistent  set  of  sentences 
is  satisflable. 

Def n  The  E— forms  of  KFCPC  are  formulas  satisfying 

1.  If  a  has  a  single  free  variable  x,  then  [(Ex)a]=>a  is  an 
E-form  with  respect  to  x. 

2.  If  e  is  an  E— form  with  respect  to  x  and  a  is  any 
sentence*  then  -»Kat3-»K  ( f  =  a )  is  an  E—  form  wrt  x. 

Lemma  _1  If  e  is  an  E— form  wrt  to  x,  then  I-  (Ex)e. 

Proof:  by  induction  on  the  composition  of  e • 

In  the  simplest  case  e  is  [ (Ex)a]=a  and  so  (Ex) f  is  a 
theorem  of  FCPC.  Otherwise  assume  (Ex) f  is  a  theorem  and 
that  a  is  a  sentence. 

H  (x)K(e=a)  3  K(Ex)(e=>o)  by  KUG. 

Since  or  is  closed  formula* 

t-  K(Ex)(e=a)  3  K((Ex)e  3  a). 

By  KMP  we  get  that 

l-  K  (  ( Ex )  e  3  a)  3  (K(Ex)e  3  Ka). 

However,  K(  Ex)  e  is  a  theorem  since  (Ex)  e  is  one  by  KNEC. 

Thus  * 

H  ( x ) K( e3a )  3  K a 

and*  therefore 

H  -»Ka  3  (Ex)-*K(  f=  a)  . 
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Since  a  is  closed;  we  finally  get 
H  (ExH-*Ka  3  -*K(c3aJ3* 

Lemma  2  If  S  is  finite  and  consistent;  then  for  every  E—form  e 
there  is  an  n  such  that  S  U  (c£x/n]}  is  consistent* 

Proof:  by  contradiction 

If  notf  then  for  every  n  I-  <e  Lx/ n  3  ,  al  ,  «  •  •  ak”l  s-«ak>  where  alf 
<x2  and  so  on  are  the  elements  of  So  Since  the  elements  of  S 
are  all  sentences?  we  have  that  <e  ;  alt  «  «  ®  »-iak>[x/n  J  is  a 
theorem  and  so  is  t  x  )  <e  ,  *  ®  ®  n«k>  by  UG  *  But  ,  by  lemma  1, 
(  Ex  3)  €  is  a  theorem  and  s©  is  C  Ex  $  <al  ,  *  ®  •  y  -«ak>  •  But  the 
elements  of  S  are  closed  and  s©  <a  1 ,  * ®  ®  ,  -»ak>  is  a  theorem 
and;  therefore,  S  is  inconsistent* 

Def n  If  e  is  an  E-“forra  wrt  to  x ,  then  c£.x/n3  is 

an  i ns t a nee  of  e  * 

Coroll  ary  JL  Any  finite  consistent  set  can  be  extended  to  a 
consistent  set  containing  an  instance  of  every  E— form. 

Proposition  If  S  is  consistent,  it  can  be  extended  to  a 
maximally  consistent  set* 

Defn  A  truth  set  is  a  maximally  consistent  set  that  contains  an 
instance  of  every  E-form. 

Corollary  2  Any  finite  consistent  set  can  be  extended  to 

a  truth  set* 

Lemma  3  If  S  is  a  truth  set  containing  -»Ka,  then  for  any 

E— forms  el,***,ek,  there  are  instances  tl,**«,i.k  so  that 
-»K<t  k  ,  ik- 1  f  •  •  •  ,  t  2 ,  l  1  f  a>  is  an  element  of  S* 

Proof:  by  induction  on  k 

If  k  is  0,  then  the  lemma  holds  since  -T»k.<a>  is  -»Ka* 
Otherwise,  assume  that  -»Kl*  e  S,  where  u>  is 

< t k , tk- 1 , • • • , 4 1 , a> •  Suppose  e  is  any  E— form  with  respect 
to,  say,  x.  Thus,  the  sentence  -* Kuo-n  K  (  )  is  an  E-form  and 

so  has  an  instance  ( i  =>u> )  as  an  element  of  S,  where  t 

is  an  instance  of  €•  But  ~»Ku  e  S,  so  since  S  is  maximally 
consistent  tK(  iaw)  is  also  an  element  of  S* 

Corollary  If  S  is  a  truth  set  containing  -»Ka,  there  is  a  set 
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R ( a , S )  —  (  t  1 ,  i  2  ,  •••]  containing  an  Instance  of  every 

E-form  and  such  that  for  every  k  -»K<  ik  ,  •  •  •  ,  a  1 ,  a>  e  S. 

Def n  N ( S )  =  (  a  |  Ka  e  S  ) 

Lemma  4  If  S  is  a  truth  set  containing  -*Ka,  then  the  set 

(^•a}  U  R(a,S)  U  N  ( S )  is  consistent* 

Proof o  by  contradiction 

If  the  set  is  inconsistent,  then  there  are  elements  of  N(S) 
al,»««an  and  elements  of  R(a,S)  t  1 »  *  *  •  t  k  such  that 
H  <a 1  ,  • •  • ,on, ik, • • • 1 1 , o^c 
By  KNEC  and  repeated  KMP 

H  ^  Ka  It*  •  •  ,  Ion,  ^ 

But  the  sentences  Kai  are  elements  of  S  so,  because  S  is 

maximally  consistent,  K<tk,»«*a>  e  S  which  contradicts  the 

corollary  to  lemma  3« 

Corollary  4  If  S  is  a  truth  set  containing  iKa,  then  there  is  a 
truth  set  containing  -»a  and  N(S)« 

Defn  Subs ( S )  =  (  S*  j  S*  is  a  truth  set  and  N(S)  c  S  *  ) 

Lemma  5  If  S  is  a  truth  set  with  S*  e  Subs(S) , 

then  N(  S)  =  N(  S*  )  . 

Proof : 

Say  a  €  N(S)  so  that  Ka  e  S*  Since  S  is  maximally 
consistent  and  since  Ka  implies  KKa,  KKa  e  S  so  that  Ka  € 
N ( S ) •  Thus  Ka  e  S'  and  so  a  €  N(S*)«  If»  on  the  other 
hand,  a  -»e  N(S),  then  Ka  -■  e  S.  Because  S  is  maximally 

consistent,  -»Ka  e  S  and  so  K-»Ka  e  S»  Thus,  -»Ka  e  N(S)  and 
-iKa  e  S'  •  Since  S*  is  maximally  consistent,  Ka  -•€  S'  and  so 
a  ->€  N(  S'  )  . 

Co  roll  ary  _5  Under  the  same  conditions,  Subs(S)  —  Subs(  S*  )  • 

Lemma  6  Assume  S  is  a  truth  set  and  X  €  Subs(S)  U  {  S  }  •  Then 
1  •  -»a  e  X  iff  a  -» e  X* 

2»  (a=>p)  e  X  iff  at  X  or  p  e  X* 

3.  ( Ex ) a  e  X  iff  a£x/n]  e  X  for  some  n  e  N. 

4*  Ka  e  X  iff  a  e  S*  for  every  S*  e  Subs(S) • 

Proof!  Consider  each  case  individually 

Cases  1  and  2  follow  directly  from  the  fact  that  X  is 
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maximally  consistence  Case  3  follows  from  the  maximal 
consistency  of  X  and  the  fact  that  X  has  an  instance  of 

every  E— form  in  that  if  X  contains  (Exja  it  will  also 
contain  a£x/n]  for  some  n  since  it  must  contain  an  instance 
of  {Exija^a*  Finally#  consider  case  4®  If  Ka  c  X#  then# 

since  Subs(S|  =  Subs(X)  by  corollary  5#  for  every  S'  in 
SubsCS)  we  have  that  a  e  Se  *  Conversely#  assume  that  Kq 
X.  Then  by  lemma  5  a  -*€  N(S|  so  Ka  e  S  and  since  S  is 
maximally  consistent#  -sKa  c  S©  Now#  by  corollary  4#  there 
is  an  element  of  Subs(S)  containing  and#  thus#  not 

containing  a  since  these  sets  are  ail  truth  sets® 

Note  that  the  proof  of  Lemma  6  depends  on  properties  of  maximal 
sets  known  to  hold  for  FOPC®  The  only  difference  here  is  that# 
because  the  axioms  and  rules  of  inference  range  over  all 

sentences  of  KFOPC#  so  do  these  properties  of  maximal  sets® 

Def  n  World(S)  e  WB  is  defined  by 

For  every  p  e  PRIM#  World(S) (p)  —  T  iff  p  e  S* 

Def n  Model ( S }  =  £  World(S«|  j  S«  e  Subs(S)  } 

Corollary  6  If  S  is  a  truth  set  and  X  e  Subs(S)  U  {  s  }  then 

For  any  at#  a  €  X  iff  V  (  a  #  World  (  X)  #  Model  (  Si)  )  =  T 
Proof:  Follows  immediately  by  induction  on  a  from  lemma  6* 

Theorem  ( Comp let  eness )  If  a  is  valid#  then  a  is  a  theorem* 

Proof:  by  contraposition. 

If  a  is  not  a  theorem  then.  £-»a)  is  consistent  and  so  there 
is  a  truth  set  containing  -»a  by  corollary  2*  But  by 
corollary  6#  there  is  an  s  and  an  m  for  which  every  element 
of  the  truth  set  comes  out  true*  Consequently#  is 

satisfiable  and#  so  a  is  not  valid* 

This  completes  the  proof  of  the  completeness  of  KFOPC* 


4*3*3  Maximal  Set  Theorem 

The  soundness  and  completeness  results  of  the  previous 
subsections  used  my  temporary  definition  of  models  descriptions 
as  arbitrary  sets  of  world  descriptions*  In  this  subsection#  I 
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) 

will  remedy  this  and  show  that  the  logic  can  equally  be  seen  to 
apply  to  maximal  sets  of  world  descriptions* 

There  is  a  compelling  reason  lor  wanting  to  use  only  maximal 
sets  as  world  descriptions#  In  the  next  chapter,  it  will  be 
convenient  to  think  ol  model  descriptions  not  as  descriptions  of 
concrete  KBs,  but  as  abstract  KBs  that  can  be  represented 
concretely  in  various  ways#  The  question  that  has  to  be  answered 
is  when  are  two  abstract  KBs  to  be  considered  distinct#  The  only 
appropriate  answer,  I  believe,  is  that  they  are  distinct  if  and 
only  if  they  know  different  things  about  the  world#  So  we  have 
the  following  definition! 

Def n  ml  is  equivalent  to  m2  iff  for  every  a  in  FOPC, 

V(Ka,ml)  =  V(Ka,m2)# 

To  correctly  individuate  abstract  KBs,  we  want  any  two  equivalent 
KBs  to  be  identical#  As  it  turns  out,  the  maximal  sets,  as 
defined  in  chapter  three  can  serve  as  canonical  representatives 
of  the  equivalence  classes# 

Def n  m  covers  s  iff  for  every  a  in  FOPC,  V( Ka^a , s , m )  —  T# 

Def n  Max(m)  =  { s  |  m  covers  s] • 

Def  n  m  is  maximal  iff  ra  =  Max  (  m )  • 

Using  0(a) ,  as  in  chapter  three,  to  denote  the  highest  nesting  of 
K*s  in  a,  we  have  the  following! 

Lemma  JL  If  0(a)  is  0  or  1,  then  for  any  s  in  WD  and  any  m,  a 
s ub set  of  WD,  V(ar,s,m)  —  V(a,s,Max(m))# 

Proof!  by  induction  on  the  length  of  a# 

The  lemma  obviously  holds  if  a  is  a  sentence  of  FOPC.  It 
also  holds  for  negations,  material  implications  and 
universal  generalizations  by  induction#  __  If»  finally, 
V  (  Kac ,  m  )  is  T,  then  for  every  s*  that  a  covers,  I  (  a  ,  s  •  )  is  T 
and  so  V  (  Ka  ,  Max  (  m )  )  is  T.  Moreover,  if  V  (  Ka  ,  m  )  is  F,  then 
so  must  be  V ( Ka , Max ( m ) )  since  the  former  is  a  subset  of  the 

1 at  t  er • 

Lemma  2  If  ml  and  m2  are  maximal  and  equivalent,  then  they  are 


identical • 
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Proof®  If  ml  and  m2  were  distinct;  then  for  some  s  in  ml*  s  is 
not  an  element  of  m2©  Since  m2  is  maximal  ,  m2  cannot  cover 
s  and  so  for  some  a  V(Ka,ia2}  is  T  and  I(cr,s)  is  F©  Since  ml 
is  equivalent  to  m2  $  V(Ka?,ml)  is  T  but  then  then  Il<x,s)  is  T 
since  s  is  an  element  of  ml® 

Theorem  1  For  any  m  e  WD ,  Max(m)  is  the  unique  maximal  set  that 
is  equivalent  to  m® 

Proof*  Clearly,  Max(m)  is  maximal©  Moreover,  by  lemma  1,  Max(m) 
is  equivalent  to  m©  Finally,  if  m*  is  equivalent  to  m,  it 
must  also  be  equivalent  to  Max(m}©  So,  by  lemma  2,  m*  must 
be  MaxC  m )  «. 

So  maximal  sets  correctly  individuate  abstract  KBs®  We  therefore 
define  model  descriptions  as  non-empty  maximal  sets  of  world 
descriptions • 

Def  n  MD  =  (Max  ( ra:)  j  me  WD ,  non— empty)  • 

This  leaves  us  with  a  definition  that  is  compatible  with  that  of 
chapter  three© 

However,  it  also  leaves  with  the  task  of  showing  that  the 
logic  of  KFOPC  does  indeed  apply  to  maximal  sets©  I  will  say 
that  a  sentence  is  M— va lid  when  it  is  interpreted  as  true  for 
every  world  description  and  maximal  set©  Similarly,  a  set  of 
sentences  is  M— satis fiabie  when  there  is  a  world  description  and 
maximal  set  where  every  sentence  in  the  set  comes  out  true© 
Obviously,  every  valid  sentence  is  M- valid®  Below,  I  will  prove 
the  converse©  This  establishes  that  the  logic  can  be  thought  of 
as  dealing  only  with  the  maximal  sets© 

Notation  If  a  is  a  formula  with  free  variables  xl,©«©,xk, 
then  a  —  ot[xl,**«,xk]  and 

a[ nl , • •  • »nk ]  =  aL x 1 / n 1 ; • *  © ; xk/nk ] • 

Notation  If  a  -  a[xl,*©©xk]  and  p  e  PR(k),  then 

pooj  is  the  sentence  (  x  1 )  •  •  •  (  xk )  K[  p(  x  1 ,  •  •  •  xk  )  =Ka  ]  • 

L emma  3  Let  A.  =  ((poq)  =>  p]  be  some  sentence 

where  p  is  some  predicate  symbol  not  appearing  in  a  or  p© 

If  A  is  valid,  then  so  is  p© 
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Proof*  Suppose  not  and  that  V(p,  stm)  =  F  <> 

For  each  s  in  ra  let  s*  agree  wit!)  s  except  on  the  p 

primitives  where  s*(p( nlf .  . .  ,nk  )  )  is  V  I Ka[n  1  , . . .  , nk  ]  ,m)  . 
Let  m*  be  the  set  of  all  such  s* .  Clearly  V(p,s,m*)  is  F 
since  p  does  not  use  p  anywhere.  Moreover, 

V(Ka[nl,.  ..  fnk],ra*)  is  V ( Ka[ n  1  , .  .  ,nk ]  fu)  since  a  does  not 
use  p  either.  Consequently,  V  (  p  o  a  ,  s  ,  iy*  }  is  1  so  V(Afsfn*) 
Is  F,  contradicting  the  assumption  that  A  was  valid. 

Corollary  If  h-  [  (poa)  =>  p],  then,  with  proviso,  H  p . 

L  e  mm  a  4  If  S  is  finite  and  consistent,  then  lor  every  formula  ot 


t  here 

is  a  pred 

icate  p  such  that  SU(pocr) 

is  consistent. 

• 

C  hoo  s  e  any  p 

with  the 

right  arity  but 

not  in  a 

or  S . 

Let 

A  be  the 

sen  tence 

(poa)  and  sa  y  S 

• 

• 

• 

•* 

rH 

a 

' — j 

II 

,  ak  ]  . 

I  f 

Ca  1 ,  a2, 

...  oik , 

A)  is  inconsistent  then 

H 

3 

< 

V 

1 

,  .  .  .  ,  a  k 

—  1  ,  -»ak>  . 

But 

,  by  the 

corolla  ry 

t  o  1  emir  a  3  ,  we 

would  have 

that 

t-  <  Of  1 ,  • 

..,  ak  — 1 , 

■•ak  > 

meaning  that  S  would  be  inconsistent  as  well. 

De  f n  A  set  of  sentences  is  s  t  abl e  iff  for  every  lormula  of  FOPC 
a,  there  is  a  predicate  p  such  that  ( poa)  is  in  the  set. 

Corollary  Every  finite  consistent  set  can  be  extended  to  a  stable 
truth  set. 

Defn  A  set  of  world  descriptions  m  is  s  t  abl e  iff  the  set 

l  p  o  ot  1  V(poa,<}  =  T) 
is  s  tabl e • 

Le  mtna  5  If  a  sentence  is  satisfiable,  there  is  an  s  and  a  stable 
m  that  satisfies  it. 

Proof  I  By  the  soundness  theorem,  the  sentence  must  be 
consistent.  Therefore,  by  the  corollary  to  lemma  4,  there 
is  a  stable  truth  set  that  contains  it.  By,  the 

completeness  theorem,  this  truth  set  must  be  satisfiable  by 
some  s  and  m»  But  since  the  set  is  stable,  m  is  also.  So 

there  is  a  stable  m  and  an  s  satisfying  the  sentence. 

Let  n  be  some  stable  set 

Cefn  For  each  formula  a [ xl , .  . «xk  ]  of  KFOPC,  a* [ xl  , •  «  • xk ]  is 
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a  formula  of  FOPC  defined  by: 

a*  =  a  ,  when  o?  is  formula  of  FOPC 

(-•a)*  =  (ar=>p)*  =  ((x)a)*  =  ( x )  a* , 

(K a)*  =  p ( x 1 f « « • , xk )  where  p  is  a  predicate  such 
that  V(poa*,ra)  =  T. 

For  any  oe[  x  1  ,  •  «  *  xk  ]  ,  any  nii<  •  «nk  and  any  sera. 

Lemma  6  V(a'£nl,»«*,nk],s,ci)  =  I(a*[nlt*»»tnk]ts)« 

Proof*  The  lemma  clearly  holds  for  formulas  of  FOPC*  It  also 
holds  by  induction  for  negations?  implications  and 
generalizations®  Consider  a  sentence  Ka [ n 1 , • • « y nk ] *  This 
sentence  is  true  iff  for  every  s'  in  ra,  at  nl  ?«»<>»  nk]  is  true 
of  s'  and  ra  iff,  by  induction?  a*( nl ?  ««  o  ?nk  3  is  true  of  se 
and  m  iff  Kae  *  [  n  1  ,  •  ©  «  ,  nk  3  is®  Suppose  V(poa*?a)  is  T  where 
C  Ka )  *  is  p{xl(«o«?xk).  If  Ka[nl?e»Mnk]  is  true*  then  so  is 

Ka*(  nl  ?  .  .  .  ?  nk  ]  and  th  e  ref  or  e  I(p(nl  ?«oMnk)  ?s)  is  T  sine  e  s 

is  an  element  of  m  •  If*  conversely?  Kot[  nl  ?  «  «  «  ?  nk  j  is  false, 
then  so  is  Kat<[nl  ?««»  ?nk]  and  so  I  (p  (ni  ?  •  •  .  ?nk)  ?  s)  is  F  for 
the  same  reason* 

Corol  1  ary  For  any  a  e  KFOPC,  V(Ka?a)  =  V(Ka*»i.i)  . 

Lemma  7  If  V(pOQ!  ?,<|  =  T  then  V(  poa?Max(m)  )  =  T* 

Proof!  By  lemma  1,  m  and  Max(m)  agree  on  Ka[ nl ? • • *nk ] ? 

kp(nl?«  ..nk)  and  K-»  p  (  n  1  ,  *  *  *  t  n  k  )  for  any  parameters 

nl ?  • •  • ?  nk<  If  Ka[nl?<  «  «  ?  nk]  is  true  for  m  then  so  is 
K p ( n 1 ? • • • , n k )  and  both  of  these  are  true  for  Max(m) •  If 
Ka[  nl  ?  .  •  t  ?nk]  is  false  for  m  then  K-«p  ( n  1  ,'..*,  ni*  )  is  true  for 
ra  and  both  of  these  conditions  hold  for  Max(m) •  Either  way, 
K(p(nl?  .. . ?  nk)=Ka(nl, . . .nk] ]  is  true  for  Max ( m )  • 

Consequently,  V(poa,Max(m) )  is  T. 

Coroll  ary  For  any  a  e  KFOPC,  V(Ka,Max(m)  )  =  V ( Ka  * , Max (  m  )  )  « 

Proof:  Apply  the  same  argument  as  lemma  6  to  Max(m) . 

Lemma  S  I  f  ra  is  stable,  then  lor  any  a  €  KFOPC,  and  any  s 

V  (  or  ,  s  ,  m  )  =  V(  a?  s?Max(  ml). 

Proof:  The  lemma  obviously  holds  if  a  e  FOPC*  Moreover,  it 

holds  by  induction  for  negations,  implications  and 
generalizations*  Consider  a  sentence  Ka.  V(Ka?m)  is  T  iff, 
by  lemma  6,  V(Ka*,ra)  is  T.  However,  a*  is  a  sentence  of 
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FOPC,  so  by  lemma  1#  V(Ka*,a)  is  T  iff  V ( Ka* , Max ( ra ) )  is  T 
iff,  by  lemma  7,  V ( Ka , Ma x ( m ) )  is  T* 

Theorem  ( Maximal  Se  t )  If  a  is  M-valid,  -then  a  is  valid* 

Proof:  Suppose,  to  the  contrary,  that  a  was  not  valid*  Then  -*a 
is  satisfiable  and,  by  lemma  5,  there  is  an  s  and  a  stable  m 
such  that  V(a, s,m)  is  F*  But,  by  lemma  S,  this  means  that 
V ( a , s , Max ( ra ) )  is  F,  contradicting  the  assumption  that  a  was 
M— valid* 

Corollary  For  any  a,  Ha  iff  a  is  M-valid 

The  above  theorem  guarantees  that  the  structure  of  MD  is  still 
sufficiently  rich  to  preserve  the  soundness  and  completeness 
theorems  (which  were,  in  fact,  needed  in  lemma  5) •  While  the 
theorem  guarantees  that  any  finite  satisfiable  set  will  be 
M— sa ti s f i ab 1 e ,  it  says  nothing  about  infinite  sets*  In  the  next 
subsection,  I  will  present  an  infinite  set  that  is  satisfiable 
but  not  M— sa t isf iab le • 

Before  doing  so,  it  is  worth  examining  a  curious  interaction 
between  maximal  sets  and  quantification*  Specifically,  I  will 
show  that  in  the  presence  of  the  Maximal  Set  Theorem, 
quantification  musf  be  understood  subs ti tut ionally •  To  prove 
this,  I  will  first  give  a  brief  account  of  how  a 
non— subs titutional  quantification  might  work* 

The  basic  idea  is  that  a  formula  (x)a  will  be  true  exactly 
when  the  open  formula  a  is  true  of  every  element  of  some 
(universal)  domain  U.  Thus,  to  define  an  interpretation  of 
sentences  of  the  language,  we  have  to  state  what  it  means  for  a 
formula  to  be  true  of  a  domain  member*  In  other  words,  we  have 
to  state  exactly  when  the  condition 

a[xl,*«*,xk]  is  true  of  ul,*.*,uk  wrt  to  s  and  m 

holds*  World  descriptions  should  now  be  thought  in  the  Tarskian 
sense  as  assigning  n— place  relations  on  U  to  the  predicate 
symbols*  We  can  let 

<s,m>  sat  a  [  ul  ,*•**,  uk  ] 


stand  for  the  above  condition,  where  it  must  be  understood  that 
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the  elements  of  U  are  not  necessarily  linguistic  (they  could  be 
tables  or  numbers)*  We  also  have  the  following  set  of 
cons t rai nts  : 


1*  <sfm>  sat  p[ u 1 « • • • v uk ]  iff  <ult..«,uk>  e  s(p). 

2*  <s»m>  sat  -=•<*£  u  1  y  •  •  •  y  uk  ]  iff  <s  ,  m  >  -»sat  a(ul,*««,uk] 

3*  <s»ra>  sat  ( a=>p  )  £  u  1  ,  •  •  .  y  uk3  iff 

<s,ra>  -isat  aC  ul  f  •  •  •  f  uk  3  or  <s,m>  sat  ul  ,«  #  .  »uk] 

4*  <sfm>  sat  ( x ) a£ u 1 v  •  •  •  ,  uk  3  iff  for  every  u  e  Uy 

<s,m>  sat  a£ uv ul f • • • » uk3 

5*  <Sym>  sat  Ka £ u 1 y • • * , uk 3  iff  for  every  s1  e  my 
<s*  y  ca>  sat  a£  ul  y  •  «  •  y uk  3 


We  can  now  define  the  interpretation  of  any  sentence  of  KFOPC  by 


Let  VMocySyii)  =  T  iff  <sfm>  sat  a[  3 

and  get  the  corresponding  notions  of  satisfiablity  and  validity. 
Note  that  parameters  were  not  used  at  all  in  this 
characterization  and  that  quantification  appealed  directly  to 
elements  of  the  domain.  Now  consider  the  following: 


Let  G  €  £  U  -•  U3  y  bijective 

Let  G(s)(p)  =  £<G(  ul,)  y  •  •  •  G  (  uk )  >  |  <uly...yuk>  e  s(p)) 

Let  G(ra)  =  (G  ( s )  1  s  e  m)  • 

Lemma  JL  <sfm>  sat  a  £  ul  y  «  •  •  y  uk  3  iff 

<G(  s)  fG(niJ  ^  sat  aCG(ul)y«..yG(uk)3. 

Proof:  The  lemma  holds  for  primitive  formulas  by  definition  of 

G(s).  It  also  holds  for  negations  and  material 

implica tionsy  triviallyy  by  induction.  Consider 

( x) a£ xy xl y •  . . y xk 3 «  <s y m>  sat  ( x ) a£ x y ul y • •  .uk 3  iff  for  every 

Uy  <sfm>  sat  a£ Uy ul y • • . y uk ]  iff  by  induction,  <G(s)yG(m)> 
sat  a£ G (u)  y G{ ul ) y • • • y G( uk) 3  iffy  since  G  is  bijectivey 


<G(s),G(m)> 

sat 

(  x) a£  X  yUl  y  .  .  . 

y  uk  3  • 

F inally  y 

<s 

y  m> 

sat 

Ka[  ...  3  iffy 

for 

every  s*  in 

ciy  <s*yin>  sat  a£. 

.  .  3 

iff, 

by 

i nduct i on, 

for 

every  s* 

in  my 

<G( s' ) 

»G( 

m)  > 

sat 

aC G ( ul )  y . • • y G ( uk ) 3  iff  for  every  s*  in  G(m),  <s*yG(m)>  sat 

ck  [  ...  3  iff  <G(  s)  yG(m)>  sat  Kd  [  •  .  .  ]  • 

Corollary  For  any  a  e  KFOPCy  VMaySym)  =  V  *  (  a  ,  G  (  s,)  yG(m)  )  . 

Lemma  2  If  m  is  maximal  (wrt  V') ,  then  G(m)  c  m. 


Page  4—29 


Proof:  Suppose  G(s)  is  any  member  of  G(m)*  If  V*(Ka,mJ  is  T, 

t  hen  I'(aCfS)  is  T  ,  and  so  ,  by  lemma  1 ,  I'  (afG(s)  )  is  T  • 

Thus,  m  covers  G(s)  and  so  G(s)  is  an  element  of  m. 

Theorem  2  If  m  is  maximal  (wrt  V*)  and  V{ (ExJKp(x) ,m]  =  T, 

then  V  £  K  (  x  )  p(  x  )  ,  m  ]  =  T* 

Proof:  Suppose  that  the  universal  quantification  is  not  known  to 

be  true*  Then,  there  is  an  s  in  m  and  a  u  such  that  u  is 
not  a  member  of  s(p)*  Since  the  existential  is  true,  there 
is  a  u*  such  that  for  every  member  s*  of  ra,  u*  is  a  member 

of  s'(p)*  Let  G  be  the  bi jection  that  swaps  u  and  u*  and 

leaves  all  other  elements  of  U  unchanged*  By  lemma  2,  G(s) 
is  a  member  of  m  and  so,  u*  should  be  a  member  of  of  G( s) ( p) 
but  it  cannot  since  u  was  not  a  member  of  s(p) • 

Corollary  [(Ex)Kp(x)  =  K(x)p(x)]  is  M-valid  (wrt  V')* 

Since  the  sentence  shown  to  be  M— valid  wrt  V'  is  one  that  we 
would  certainly  not  want  as  a  theorem  of  KFOPC,  we  are  left  with 
only  two  options:  either  V*  cannot  be  used  (and  so 
quantification  is  done  substi tutionally  via  parameters)  or 
M— validity  must  not  correspond  to  validity*  Since  we  have  very 
good  reasons  for  wanting  to  restrict  our  attention  to  maximal 
sets,  the  only  alternative  is  to  understand  quantification 

subst i tut ion al ly •  In  particular,  if  we  wani  knowledge  to  be 
linguistically  based,  then  we  do  want  M— validity  to  be  equivalent 
to  validity*  This  is  one  fundamental  difference  between  my 
approach  and  one  that  would  be  based,  say,  on  standard  Kripkean 
modal  logic*  In  the  latter  case,  one  could  indeed  have  two 
distinct  structures  that  nonetheless  know  exactly  the  same 
sentences  of  FOPC* 

4*3*4  I r reducib i li ty  And  Undecidability 

In  this  subsection,  I  will  prove  two  properties  of  subsets 
of  KFOPC*  The  first  property  shows  that  the  subset  of  KFOPC 

without  nested  K  operators  is  not  as  expressive  as  the  entire 

language*  By  this  I  mean  that  there  will  be  a  sentence  of  the 

original  language  such  that  no  sentence  of  the  reduced  language 
is  equivalent  to  it* 


This  is  in  contrast  to  the  propositional 
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language  KPL  which  was  shown  to  be  reducible  in  section  3«4®1* 
In  the  first  order  caset  the  language  is  irreducible  in  that 
sentences  dealing  in  me t a— knowledge  are  not  merely  paraphrases  of 
sentences  dealing  only  in  world  knowledge* 

The  second  property  of  KFOPC  that  I  will  demonstrate 
Involves  a  completely  different  subset*  What  I  will  show  is  that 
the  monadic  version  of  KFOPC  is  undecidable*  The  proof  I  will 
present  is  modelled  after  a  similar  one  devised  by  Kripke  for 
modal  logic  (see  (Hughes  and  Cresswell  68,  p*148j) • 

To  show  the  irreducibi li ty  of  KFOPC,  I  will  begin  by 
defining  a  certain  set  of  world  descriptions  si,  s2,  •••  by 

Let  sl(p)  =  T  iff  p  =  p(nl ) 

and,  for  each  k  >  1  , 

Let  sk(p)  =  T  iff  fi  -  p(nl)  or  fi  —  p ( nk ) • 

Next,  I  will  define  a  subset  ml  of  WD  by 
Let  ml  —  (s2 ,  s3,  s4,  •*«}• 

Lemma  _1  Let  s  be  any  of  si,  s2  •••  and  n  e  N  where  n  £  nl  • 
Suppose  a  is  any  formula  of  FOPC  with  at  most  x  free* 

Then,  there  is  another  parameter  n*  such  that 
I(a[x/n],s)  =  I ( aCx/n *  3 , s ) • 

Proof:  by  induction  on  the  length  of  a* 

Suppose  Qf(x/n]  is  a  primitive  sentence  but  is  not  p(nk)  for 
some  k*  Then,  any  other  parameter  n*  will  satisfy  the 
lemma*  If  ac(x/n]  is  p(nk),  then  either  k  >  1  or  the  lemma 
holds  because  x  is  not  free  in  a*  So,  suppose  k  >  1:  if  s 

is  si,  then  let  n*  be  anything  other  than  nl;  if  s  is  sk, 
then  let  n*  be  nl;  if  s  is  si,  where  i  is  not  k,  then  let 
n*  be  anything  other  than  nl  or  ni*  The  lemma  clearly  holds 
by  induction  for  negations  and  material  implications*  Say 
the  formula  is  (y)cr*  Then,  Cy)a£x/n]  is  true  iff  for  every 
parameter  n*  al x/ n ; y/ n* ] •  By  induction,  this  is  true  iff 
a[ x/n' ; y/n* J  is  true  iff  (y)a(x/n*]  is  true* 

Lemma  2  Let  a  be  any  sentence  of  FOPC  and  nk  any  parameter 
such  that  k  >  1  and  nk  does  not  appear  in  a* 
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Then*  I(a,sl)  =  I(a,sk)# 

Proof:  by  induction  on  the  length  of  cr# 

If  a  is  a  primitive  sentence,  then  the  only  way  si  and  sk 
can  disagree  on  a  is  when  a  is  p(nk)  in  which  case  nk 
appears  in  a#  The  lemma  clearly  holds  on  negations  and 

material  implications#  Now  consider  the  formula  (Ex)a«  If 
I((Ex)a,sl)  is  T  then  for  some  n  I(a[ x/n] ,sl)  is  T#  If  n  is 
not  nk,  then  nk  still  does  not  appear  in  a  so  by  induction 
I ( a [ x/n ] , sk )  is  T  and  so  is  I ( ( Ex ) a , sk) •  If  n  is  nk ,  then 
by  lemma  1,  there  is  another  n1  so  that  I ( a[ x/n 1 ] , si )  is  T' 
and  the  above  argument  can  be  repeated#  Conversely,  if 
I ( (Ex]a,sk)  is  T  then  for  some  n,  I(a(x/nJ,sk)  is  T#  By  the 
same  argument  as  above,  no  matter  what  the  n  is,  I( (Ex)a,sl) 
is  T  by  induction  and  lemma  1# 


Lemma  3  The  set  ml  covers  si# 
Proo  f I 


Let  a  be  any  sentence  of  FOPC  and  let  nk 
other  than  nl  that  does  not  appear  in 
description  sk  is  an  element  of  ml  and 
that,  by  lemma  2,  I(a,sl)  =  I ta,sk) • 
there  is  an  element  of  ml  that  agrees  wit 
covers  si  (and  so,  ml  is  not  maximal) • 


be  any  parameter 

a#  Now,  the  world 

has  the  property 
Thus,  for  every  a, 
h  si  on  a •  So  m 1 


Lemma  4  V(Kp(n)»ml)  —  T  iff  n  =  nl# 

Proof!  (if)  part  is  direct# 

Suppose  k  >  1  and  consider  sk+1#  The  world  description  sk+1 

is  an  element  of  ml  but  has  sk+l(p(nki)  )  =  F#  So,  for  every 

parameter  except  nl,  there  is  an  element  of  ml  that  assigns 
p  applied  to  it  to  false  and  thus  V(Kp(n),ml)  is  false  also# 

L  emma  5  For  any  s  e  ml,  V[ ( Ex)  (p( x)  A  nKp ( x )  ) , s , a 1  ]  =  T# 

Proof!  by  contradiction 

If  v ( - , s , m 1 )  is  F  then,  for  every  n,  either  V(p(n),s,ml)  is 

F  or  V(  Kp  (  n)  *  s9ij)  is  T.  For  s  to  be  an  element  of  ml,  we 
h av e  that  there  is  an  n  other  than  nl  sue h  that  V(p(n),s,ml) 
is  T  and  so  V ( Kp ( n ) , s , ml )  is  T  contradicting  lemma  4. 

Now  consider  the  sentence 

u  =  K[p(nl)  a  (Exl(plx)  a  ~»Kp  (  x )  )  ] 
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Lemma  6  V ( u , Max ( m 1 ) )  —  F* 

Proof J  by  contradiction 

Suppose  ijj  is  true*  By  lemma  3 ,  si  is  covered  by  ml  and  so 
si  is  in  Max(ml)*  Thus,  V  ( Kp  ( n  1 )  ,  Max  ( ml )  J  is  T  and 
V  (  (  Ex)  p  (  x)  A-iKp  ( x )  ,  s  1 ,  Max  (ml))  is  T  also*  Thus  for  some  n, 

sl[  p(n)  ]  and  V  (-»Kp  ( n )  ,  Max  ( ml )  )  are  both  T*  But,  by 

definition  of  si,  sl£p(n)]  is  T  iff  n  is  nl  which  means  that 
V(-»Kp(  nl )  ,  Max(  ml )  )  is  T* 

Theorem  There  is  a  sentence  u  of  KFOPC  such  that  for  any  ot, 
if  I-  (  a  =■  ui )  then  the  order  of  a  >  1* 

Proof:  by  contradiction,  letting  u  be  defined  as  above* 

If  there  was  an  a  provably  equivalent  to  u/,  then  by  the 
completeness  theorem  of  KFOPC,  for  every  world  description  s 
and  every  set  of  world  descriptions  m,  a  and  u  must  take  on 
the  same  truth  values*  However,  by  lemmas  4  and  5  V{w,ml) 
is  T  and  by  lemma  6,  V(  <*> ,  Max  ( ml )  )  is  F*  Thus,  for  any  s, 
V(<x,s,ml)  must  be  T  and  V  ( a ,  s,  Max(  m  1  ) )  must  be  F*  Since  a 
has  a  different  truth  value  with  respect  to  ml  and  Max(ml) , 
by  lemma  1  of  section  4*3*3,  the  order  of  a  must  be  greater 
than  1 • 


This  theorem  demonstrates  that  a  dialect  of  KL  that 
me ta— knowledge  would  not  be  as  expressive  as  the 
language*  Notice  that  the  proof  depends  on  the  general 
the  completeness  theorem  with  non— maximal  sets 
descriptions*  As  a  corollary  to  this  theorem,  we 
following : 


had  no 
original 
form  of 
of  world 
have  the 


Corollary  There  is  an  infinite  set  that  is  satisfiable  but  not 
M-satisfiable* 

Proof:  Let  S  =  (a  pure  |  V(a,ml)  =  T] • 

Clearly  ml  satisfies  S*  Suppose,  to  the  contrary,  that  some 
maximal  m  satisfies  S*  Then,  m  oust  be  equivalent  to  ml 
and,  therefore,  by  theorem  1  of  section  4*3*3,  equal  to 
Max(ml) •  But  Max(ml)  does  not  satisfy  S  since,  as  in  the 
proof  of  the  theorem,  ml  and  Max(ml)  disagree  on  the  pure 
sentence  u  • 


While  the  Maximal  Set  Theorem  tells  us  that 


any 


finite 
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sati  sliable  set  is  M— sa ti sf iabl e  ,  "this  corollary  is  a 
counter-example  to  the  theorem  when  the  set  is  infinite. 

In  the  final  part  of  this  subsection»  I  will  prove  that  the 
monadic  version  of  KFOPC  is  undecidable. 

Suppose  a  is  a  sentence  of  FOPC  using  a  single 
binary  predicate  R. 

Defn  H  (  at )  is  at  with  R(el,e2)  replaced  by  -nK-»[  P  {  e  1 )  a  Q  (  e2 )  ] 

Lemma  _1  If  a  is  satisfiable  then  so  is  H  ( at )  • 

Proof:  Suppose  w  satisfies  at  •  Let  m  be  the  set  of  all  w*  such 

that  I (P(nl) AQ(n  i) ,w*)  is  T  iff  I ( R ( nl , n2)  , w)  is  T. 

Clearly,  m  is  not  empty*  Moreover,  by  a  simple  induction 

argument,  V  ( a  =  H  ( a )  ,  w ,  u)  is  T*  So,  since  I(at,w)  is  T, 

V(H(at),m)  is  as  well*  Thus,  H(o:)  is  satisfiable* 

Lemma  2  If  H(at)  is  satisfiable,  then  so  is  at. 

Proof:  Suppose  ra  satisfies  H(aJ*  Let  w  be  defined  in  such  a  way 

that  w(R(nl,n2))  is  T  iff  there  is  a  w*  in  m  such  that 
w*(P(nl))  is  T  and  w*(Q(n2))  is  T*  By  induction  on  a, 

I(at,w)  is  the  same  as  V(H(at)  ,ra)  •  Since  the  latter  is  T  by 
hypothesis,  a  is  satisfiable* 

Co  rollary  I-  a  iff  HH(ar)* 

Theor  em  Monadic  KFGPC  is  not  decidable* 

Proof:  H  always  produces  a  monadic  sentence  of  KFOPC  given  that 
its  argument  uses  a  single  binary  predicate.  If  monadic 
KFOPC  were  decidable,  there  would  also  be,  by  the  above 
corollary,  a  decision  procedure  for  sentences  of  first  order 
logic  containing  a  single  binary  predicate.  However,  a 

theorem  of  first  order  logic  states  that  the  decision 

problem  restricted  to  these  sentences  is  unsolvable* 


4.4  EQUALITY 

In  this  section,  I  will  consider  what  changes  have  to  be 
made  to  the  language  to  incorporate  an  equality  (or  identity) 

There  are  many  reasons  for  wanting  an  equality 
but  the  nest  obvious  is  for  counting.  Moreover,  in  the 


predicat e • 
relati on 
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next  section  where  non-rigid  terms  are  introduced^  equality  will 
be  essential  to  state  what  is  known  about  these  terms* 

The  section  is  divided  into  four . parts*  The  first  motivates 
the  principal  obstacle  to  a  correct  treatment  of  equality  and 
suggests  a  new  version  of  universal  generalization  to  cope  with 
it.  The  second  subsection  presents  the  modification  to  the 
semantics  and  proof  theory  of  FOPC  that  are  required  for  equality 
and  demonstrates  some  properties  of  the  relation.  The  third 
subsection  considers  the  impact  of  equality  on  the  language  KFOPC 
and  what  changes  to  the  soundness  and  completeness  proofs  of 
section  three  are  required#  Finally*  in  the  fourth  subsection* 
there  is  a  short  discussion  on  whether  or  not  all  true  identity 
sentences  should  be  known. 

4.4.1  Universal  Generalization 

In  this  subsection  I  will  consider  the  major  problem 
involved  in  the  introduction  of  equality  into  FOPC.  We  obviously 
want  theorems  of  the  form 

(  x)  (  x  =  x  ) 

or  (x)(y)(x=y  =  y=x ) . 

The  major  issue  here  deals  with  sentences  involving  parameters 
and  whether  or  not  we  want  sentences  like 


(1)  (nl  *  n2)  where  nl*n2  e  N 


as  theorems. 

It  might 

appear 

that  the 

answer 

is 

obviously  yes. 

However,  it 

should 

also 

be  noted 

that 

if 

parameters  are 

understood  as 

free  variables 

then  ( 1 ) 

should 

not 

be  a  theorem 

since  by  application  of  the  rule  UG  we  get 

(2)  (xi ( nl  ^  x) 

and  thus 

(3)  (nl  *  nl) 

an  obviously  undesirable  consequence.  Since  the  deduction  from 
(2)  to  (3)  is  unassailable*  we  are  left  with  two  alternatives: 


insisting  that  (1)  is  not  a  theorem 
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-  prohibiting  the  deduction  from  (1)  to  (2)* 


As  it  turns  out  t  the  second  alternative  is  the  appropriate  one 
here  but  to  see  this,  it  is  necessary  to  examine  the  consequences 
of  the  first. 

As  noted  above*  one  rationale  in  accepting  the 
non- theoremhood  of  (1)  is  that,  under  the  interpretation  of 
parameters  as  free  variables,  the  formula 

(4)  (nl  =  n  2 ) 

is  taken  to  be  consistent.  In  other  words,  it  is  consistent  to 
assume  that  two  free  variables  denote  the  same  element  of  the 
domain . 

There  are  two  ways  this  can  be  handled  semantically.  One 
way  is  to  allow  interpretations  to  specify  the  mapping  from 
parameters  to  domain  elements  in  which  case  (4)  is  satisfiable. 
The  second  method  is  to  treat  parameters  as  variables  so  that  any 
sentence  containing  a  parameter  is,  in  fact,  open.  In  this  case, 
we  might  insist  that  soundness  and  completeness  hold  only  for 
formulas  containing  no  parameters.  However,  the  problem  with 
both  these  approaches  is  that  quantification  can  no  longer  be 
handled  subs ti tutionally  and  we  are  therefore  faced  once  again 
with  the  prospect  that  the  sentence 

(Ex)Sp(x)  3  K(x)p(x) 
is  valid. 

As  noted  above,  there  is  an  alternative  to  denying  that  (1) 
is  a  theorem  and  that  is  to  revise  UG  so  that  the  inference  from 


( 1) 

t  o 

( 2 )  is  no 

longer  sound. 

The  problem  with 

UG 

as  i  t 

now 

st  ands 

is  that 

it  was  based  on 

the  assumption 

that 

no  parameter 

was 

special  in  that  a  proof  for 

one  parameter 

could 

always 

be 

duplicated  for  any  other.  In  fact,  once  equality  is  introduced 
this  is  no  longer  true.  The  parameter  nl  is  indeed  special  in 
that  it  is  the  only  parameter  that  is  equal  to  itself  (and  not 
equal  to  any  other).  So,  although  (1)  can  be  logically  true,  (2) 
is  not  since  (1)  will  be  valid  by  virtue  of  the  special 
properties  of  parameters  nl  and  n2. 
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One  way  to  remedy  UG  when  equality  is  present  is  to  use  the 
more  general  rule  of  universal  generalization  discussed  earlier  l 

UG*.  If  for  every  n  H  a[x/n]  then  I-  (x)a. 

This  certainly  does  the  trick  for  blocking  the  inference  from  (1) 
to  (2),  but,  as  already  noted,  has  serious  drawbacks  of  its  own. 
Fortunately,  I  have  discovered  an  alternative  to  UG*  which  blocks 
the  undesirable  inference  and  yet  only  requires  a  finite  notion 
of  proof.  X  call  this  new  inference  rule  UGE  (where  the  E  is  for 
Equal i ty ) : 

UGE.  If  for  every  n  in  a  I-  a  £ x/ n  3 
and  for  some  n  not  in  a  H  atx/n], 
then  H  (x)a. 

So,  to  be  able  to  do  universal  generalization  using  UGE  on  a 
sentence  with  k  parameters  requires  (k+1  )  proof  segeraentsl  one 
for  each  parameter  appearing  in  the  formula  and,  as  before,  one 
for  some  parameter  not  appearing  in  the  formula.  In  the  case 
where  a  sentence  contains  no  parameters,  UGE  reduces  to  UG • 

The  interesting  point  regarding  UGE  is  that  not  only  does  it 
properly  handle  equality  (as  will  be  proven  in  subsection  three), 
it  behaves  exactly  like  UG  when  there  is  no  equality.  In  other 
words,  if  we  temporarily  define 

el-  a  to  mean  a  is  a  theorem  using  UGE  (and  not  UG) 

then  I  will  show  that  in  the  case  of  FOPC  without  equality,  the 
two  sets  of  theorems  are  the  same. 

Let  F  e  [  N  -*  N ]  and  define  F(  a )  as  for 
lemma  3  of  section  4.3.1. 

Lemma  _1  If  el-  a,  then  for  any  F,  el-  F(a). 

Proof:  By  induction  on  the  length  of  the  derivation. 

If  a  is  an  axiom  then  so  is  Fiat)  since  no  axiom  (of  FOPC) 

treats  a  constant  specially.  For  any  F,  if  F(ot)  and  F  (ct=>p) 

are  provable  then  so  is  F  ( p )  by  MP  since  F(az>p)  is 

(F(d£  )3F(p)  )  •  Finally  consider  UGE .  Let  a  be  any  formula 

containing  only  the  parameters  nl,  n2  ...  nk.  Let  n  be 

some  parameter  not  appearing  in  a.  Suppose  (x)a  is  provable 
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by  UGE  given  that  af  x/ ni  ]  and  ot£x/n]  are  provable*  By 
induction*  for  any  F*  F( a[x/ni ] )  and  F(a£x/n])  are  provable* 
Let  F*  be  any  mapping  that  agrees  with  F  on  the  ni 's  but 
such  that  F*  (  n  )  does  not  appear  in  F(a) •  So  by  induction  as 
W©11»  F*(  act  x/ ni  ]  )  and  F*(a[x/n])  are  also  provable*  Now 

F*(a[x/  ni]  )  is  just  F  (  a  )  [  x/F  (  n  i  )  ]  and  F*(a£x/n])  is  just 
F  ( at )  [  x/ F*  (  n  )  ]  where  the  F(ni)  are  all  the  parameters  in  F(cr) 
and  F*(n)  does  not  appear  in  F(a)*  So*  by  UGE*  (x)F(a)  is 
provable  and  this  is  just  the  same  as  F  (  ( x )  a  )  • 

Theorem  H  a  iff  el-  a* 

Proof:  (it)  obvious  given  that  UGE  subsumes  UG • 

(only  if)  by  induction  on  the  length  of  the  derivation* 
The  axioms  and  rule  MP  are  duplicated  in  the  definition  of 
el-*  Suppose  the  last  step  in  the  proof  of  I -(x)a  used  UG 
where  ce£x/n]  was  a  previous  step  in  the  proof  and  n  does  not 
appear  in  at*  By  induction  we  have  that  el-a[x/n]*  Let  n*  be 

any  parameter  and  define  F  to  map  every  parameter  in  a  to 

itself  and  to  map  n  to  n**  By  the  above  lemma,  ef-F(a£x/nJ) 
and  so  eHa(  x/n'  ]  •  So,  for  every  parameter  n*  el-a£x/n']  and, 
consequently,  by  UGE,  eH-(x)at* 

The  import  of  this  ^theorem,  is  that  as  far  as  FOPC  is  concerned 

the  rules  UG  and  UGE  are  indistinguishable  except  in  the  length 

of  the  resulting  proofs*  So  given  that  the  rules  of  inference  of 
FOPC  are  MP  and  OGE,  we  can  examine  what  axioms  are  needed  for 
equality  and  what  the  corresponding  semantics  should  be* 


4*4*2  Semantics  And  Ax ioraat ization 

I  will  call  the  first  order  language  with  equality  FOPCE  and 
it  is  the  obvious  generalization  of  FOPC  where  there  is  a  new 
formation  rule  for  formulas: 

If  e  and  e*  are  elements  of  N  U  VR , 
then  (e  =  e* )  is  a  formula. 

With  regard  to  the  semantics  of  FOPCE,  we  need  only  concern 
ourselves  with  the  new  primitive  sentences  which  are  of  the  form 

(1)  (n  =  n1)  where  n,  n*  e  N* 
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Given  our  discussion  of  the  previous  subsection,  we  want 
sentences  like  (1)  to  be  valid  when  n  and  n*  are  the  same 
parameter  and  unsa tisfiable  when  they  are  distinct*  So  the 
truth-value  of  sentences  like  (1)  does  not  depend  on  the  world 
description  involved  at  all*  We  might  say  that  equality  is  a 
r igid  predicate  in  the  same  way  parameters  are  rigid  designators* 
The  modification  to  the  interpretation  function  I  is,  thus, 
straightforward:  all  we  need  is  a  new  case  in  the  composition  of 

formulas  like 

I[ |n=n' ) ,s]  =  T  if  n  and  n*  are  the  same  parameter 

=  F  otherwise* 


Turning  our  attention  now  to  the  axi onatiza tion  of  FOPCE,  we 
certainly  must  insist  that  sentences  like  (1)  are  either  theorems 
or  inconsistent  if  the  proof  theory  is  to  agree  with  the 
semantics*  The  question  remains,  however,  as  to  whether  this 
property  on  sentences  like  (1)  is  sufficient  to  guarantee 
soundness  and  completeness*  Among  the  usual  other  properties  one 
would  like  to  be  able  to  prove  about  equality  are  that  it  is  an 
equivalence  relation  (reflexive,  symmetric  and  transitive)  as 
well  as  theorems  of  the  form 


(x)(y)C  (x=y)  =  ( p( xj  =p( y ) }  3 

which  states  that  if  x  and  y  are  the  same  thing,  then  they  are 
indistinguishable  (with  respect  to  p)  •  Finally,  we  should  be 
able  to  count  properly  using  equality  in  that,  for  example,  for 
any  k,  there  should  be  a  theorem  stating  that  there  are  more  than 
k  objects*  If  we  let  Qk  denote  the  kth  theorem,  then  we  have 


Ql.  (xl ) ( Ey ) ( y*xl ) 

Q2.  (xl) (x2 ) (Ey) (y*xl ) A(y*x2) 

•  •  • 

Qk.  (xl )  • • •  (xk)  ( Ey)  ( y*xl ) a# .  .  a (y*xk) 


where  all  of  these  should  be  theorems  of  FOPCE* 

As  it  turns  out,  all  the  above  are  indeed  provable  given 
that  sentences  like  (1)  and  their  negations  are*  So  all  we 
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really  need  do  is  guarantee  these  theorems  by  making  them  axioms 
of  FOPCE*  This  leads  to  the  following  proof  theory  for  FOPCEI 

Axiom  Sc  hema  ta  Those  of  FOPC  and 
AEl •  (n  =  n)  for  any  n  €  N 

AE2*  (n  1  n')  for  any  distinct  n  and  n*  e  N 
Rul es  o  f  Inf  ere  nee  MP  and  UGE* 

Note  that  these  are  two  axiom  schemata  where  the  n  stands  for  any 
element  of  the  set  of  parameters*  The  fact  that  AE2  has  a 
proviso  attached  should  no  more  concern  us  than  the  fact  that  the ' 
standard  axiona t iza t ion  of  FOPC  has  a  proviso  regarding  A5  (the 
axiom  of  specialization)  dealing  with  the  possible  collision  of 
quan  ti f i ers • 


To  show  that  this  proof  theory  has  the  right  sort  of 
properties*  I  will  prove  directly  that  there  are  more  than  two 
objects*  that  equality  is  symmetric  and  that  identicals  cannot  be 
di scerned • 


Theorem  I-  (xl )  (  x2  )  (  Ey )  [  (  y?xl )  a  (  y*x2  )  ] 


Proof : 

1*  ( n3  *  nl)  a  ( n3  *  n2)  AE2 

2.  (Ey)[ (y  *  nl )  a  ( y  *  nl)]  l,FOPC 

3*  ( Ey) [ (y  *  nl )  a  (y  *  n2)]  1,F0PC 

4*  ( x2 ) ( Ey ) [ ( y*nl )  a  (ylx2)]  2*3*  UGE 

5*  ( xl ) ( x2) ( Ey) [ ( y*xl ) a( y*x £) ]  4* UGE 


The  proofs  for  the  other  Qk*s  are  similar  but  considerably 
longer*  Note  that  step  4  above  required  a  proof  for  a[x2/n2]  and 
also  a[x2/nl  ]  since  nl  was  a  parameter  of  the  ct  • 

Theorem  H  (x)(y)[  (x=y)  =  (y=x)  ] 


Proof  I 

1.  (  nl  =  n  1 )  (nl  =  nl)  FOPC 

2 •  ( nl  1  n2 )  .  AE2 

3*  (  n  1=  n  2  )  =>  (n2  =  nl)  2, FOPC 

4.  ( y ) £ ( nl=y )  =  (y=nl)3  2, 3* UGE 

5.  ( x ) ( y ) C ( x=y) = ( y=x) ]  4, UGE 


Theorem  ( Indi scern ib ili ty  of  Identicals!  Let  a  be  any  formula 

with  at  most  one  free  variable  x  and  let  p  be  a  with  some 
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free  occurrences  of  x  replaced  by  free  occurrences  of  y«  Then 
«-  (x)  ( y)  [  ( x=y )  o  C  a-fi  )  ] 

Proofs 

Let  v  be  the  formula  £  (  x=y)  ^  ( )  ]  •  Suppose  w  has 

parameters  nl »  n2  up  to  nk  but  not  n' •  Let  n  be  any  of 

these  k+1  parameters.  Since  a£x/njy/n]  is  the  same  sentence 
as  p[x/n;y/n],  the  consequent  of  w£x/njy/n]  is  a  theorem  and 
thus  so  is  u/£x/n;y/n]«  Let  n*®  be  any  parameter  distinct 
from  n*  Since  (n*n'®)  is  a  theorem*  the  negation  of  the 

antecedent  of  wfx/njy/n'®  ]  is  a  theorem  and*  thus*  so  is 

ul x/n; y/n" ] •  So  for  every  parameter  n"  (Including  n  now 

itself)*  u/£  x/ n  J  y/n1®  ]  is  a  theorem  and  so*  by  UGE*  (y)u/£x/n] 

is  a  theorem*  Since  this  is  true  for  all  the  parameters 

appearing  in  u  and  at  least  one  not  appearing  in  u/*  by  UGE* 
(x)(y)us  is  a  theorem* 

The  real  test  of  the  axi oma tiza ti on  of  FOPCE  is*  of  course* 
whether  or  not  it  agrees  precisely  with  the  semantics*  This  will 
be  shown  to  be  the  case  in  the  next  section  when  the  impact  of 
the  equality  predicate  on  KFGPC  is  considered* 

4*4*3  The  Knowledge  Language 

I  will  now  consider  what  changes  are  necessary  in  the 
semantics  and  proof  theory  of  KFOPC  to  handle  the  obvious 

generalization  KFCPCE  which  includes  the  equality  predicate* 

One  property  we  certainly  want  of  KFOPCE  is  that  sentences 

like 

( 1 )  K ( nl=n 1 ) 
and  (2)  K(nl£n2) 

should  be  theorems  to  preserve  the  property  that  any  theorem  of 
the  world  language  (FOPCE)  is  always  known  to  be  true*  This  is 
not  very  controversial  since  all  it  states  is  that  any  KB  is  able 
to  notice  the  identity  between  two  occurrences  of  the  same 
parameter  and  able  to  discriminate  between  two  distinct 

parameters* 


Page  4—41 


One  way  "to  guarantee  sentences  (1)  and  ( 2  j  as  "theorems  of 
KFOPC  is  make  them  axioms  introducing  say  KAE 1  and  KAE2  based  on 
AEl  and  AE2.  The  simpler  method*  however*  is  to  notice  that  any 
sentence  of  FOPCE  whose  only  predicate  is  equality  has  a 
truth— value  that  is  independent  of  the  world  in  question*  Since 
equality  is  a  rigid  predicate,  we  can  interpret  sentences  only 
containing  equality  as  pure  and  therefore  subject  to  the  axiom 
schema  MK.  Consequently,  for  any  parameters  n  and  n*  (not 
necessarily  distinct) 


(3)  (n=n*)  3  K(n=n') 

(4)  (n*n‘ )  3  K(n^n' ) 

are  both  instances  of  MK.  Since  the  antecedent  of  (3)  is  a 
theorem  precisely  when  n  and  n*  are  the  same  parameter,  the 
consequent  will  be  provable  as  well,  leading  to  (1)*  Similar 
considerations  apply  to  (4)  and  lead  to  the  provability  of  (2)* 
The  net  result  of  all  this  is  that  the  proof  theory  of  KFOPCE  is 
exactly  the  same  as  the  proof  theory  of  KFOPC  except  that  the 
notion  of  a  pure  sentence  has  been  enlarged  to  include  the 
equality  predicate  and  UG  has  been  replaced  by  UGE • 


The  change  to  the  semantics  of  KFCPC  to  accomodate  equality 
is  trivial.  All  that  is  needed  over  and  above  the  existing 
interpet a tion  is  a  way  to  interpret  primitive  equality  sentences 
and  this  is  provided  by  FOPCE: 

V(  ( n=n '  )  , s , m  ]  =  T  if  n  and  n*  are  the  sane  parameter 

=  F  otherwise. 


This  is  as  it  must  be  since  we  want  V  to  agree  with  I  on  every 
sentence  of  FOPCE.  Note  that  the  interpretation  of  primitive 
identity  sentences  is  not  only  world  independent  but  model 
independent  as  well.  The  equality  or  inequality  of  two 
parameters  is  strictly  an  artifact  of  the  language  being  used 
much  like  the  interpretation  of  negation  or  material  implication. 

In  the  rest  of  this  subsection,  I  will  review  the  soundness 
and  completeness  theorems  of  KFOPC  in  the  context  of  KFOPCE. 

To  guarantee  the  soundness  of  the  proof  theory  of  KFOPCE,  we 
must  once  again  examine  MK,  KUG  and  the  rule  UGE.  Returning  to 
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the  proofs  of  section  4*3*1,  it  is  obvious  from  the  proof  of 
lemma  1  that  KUG  continues  to  hold*  In  fact,  as  was  noted 
ealier,  KUG  is  based  on  a  mythical  inference  rule  UG*  that 
subsumes  both  UG  and  UGE*  As  for  the  validity  of  the  MK  axiom, 
we  need  only  consider  the  step  in  the  induction  argument 
involving  an  equality  sentence*  There  are  two  cases:  either  the 
sentence  is  false  or  it  is  always  true  in  which  case  it  is  known 
to  be  true*  Either  way,  the  instance  of  MK,  which  looks  like  (3) 
above,  is  valid* 

This  leaves  us  with  showing  the  soundness  of  the  rule  UGE* 
The  first  step  is  to  weaken  lemma  3  to  require  that  G  be 
bijective  and  not  just  onto*  Given  this,  the  lemma  now  holds  for 
KFOPCE  since  in  the  case  of  equality  we  have  the  following: 

1*  If  V£ G( n=n 1 ) , s , m ]  is  T  then  G(n)  is  G(n')  and  since  G  is 
bijective,  n  is  n'  and  so  V£  ( n=n  1  ) »G '  ( s ) , G *  ( m )  ]  is  T* 

2*  If  V[ G( n=n 1 ) , s , m ]  is  F,  then  G(n)  is  not  G(n')  and  so  n 
is  not  n*  and,  thus,  V£ (n=n#  )  ,G*  (s)  ,G*  (m)  ]  is  F* 


The  next  step  is  to  weaken  lemma  4  by  requiring  that  both  n  and 
n*  not  appear  in  the  formula  a»  Within  the  proof,  G  can  now  be 
defined  as  the  function  that  interchanges  n  and  n*  and  leaves  all 
other  parameters  unchanged*  The  function  G  is  then  a  bijection 
and  lemma  3  can  be  used  in  the  proof*  Finally,  in  the  proof  of 
the  soundness  of  UGE  itself,  we  assume  that  a£x/n]  is  valid  for 
some  n  not  in  a  and  that  a[ x/nl]  is  valid  lor  every  ni  appearing 
in  a*  If  {x)as  is  not  valid  then  for  some  n*  a£x/n*  ]  is  false 
somewhere  so  n*  does  not  appear  in  a*  Because  of  this,  lemma  4 
can  be  used  once  again  to  derive  a  contradiction*  Given  that  UGE 
is  sound,  the  soundness  of  KFOPCE  follows  as  before* 

Turning  now  to  the  completeness  of  the  axi omatizat ion ,  first 
notice  that  lemma  2  still  holds  since  the  use  of  UG  in  the  proof 
could  have  been  replaced  by  UGE  (or  UG*  for  that  matter)*  Given 
the  new  understanding  of  MK ,  KNEC  continues  to  apply  so  lemmas 
3,4  and  5  remain  unchanged  for  the  new  proof  theory*  For  lemma 
6,  we  want  the  additional  property  that 


5 •  ( n=n' )  e  X 


iff 


n  is  n* 
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which  is  guaranteed  by  the  maximal  consistency  of  X  and  the 
axioms  AEl  and  AE2.  The  completeness  of  the  proof  theory  for 
KFOPCE  follows  directly  from  the  (extended)  corollary  to  lemma  6. 

4.4.4  Discussion 

One  thing  worth  noticing  is  that  given  our  understanding  of 
MK »  the  somewhat  controversial  sentence 

(1)  (x)(y)£  (x=y)  =>  K(x=y)  ] 

(and  its  dual  for  inequality)  is  a  theorem  of  KFOPCE.  In  fact, 
the  proof  of  this  only  depends  on  knowing  AEl: 


1.  K(nl=nl) 

2.  (  nl=n  1  )  =)  K  (  n  1  =n  1 )  l,FOPC 

3.  (nl*n2)  AE2 

4.  ( n l=n  2 )  =  K(nl=n2)  3,FOPC 

5.  (y)£(nl=y)  =>  K(nl  =  y)  ]  2,4,UGE 

6*  (x)(y)£(x=y)  ^  K(x=y)J  5,UGE 


The  reason  (1)  is  controversial  is  that  it  appears  to  state  that 
any  true  identity  sentence  is  known  to  be  true,  that  is,  that  a 
KB  must  have  complete  knowledge  about  all  identity  sentences.  To 
use  a  classic  example,  by  using  (1)  and  applying  A4  twice,  we  get 

(2)  ( Aut hor Cf Waverley  =  AuthorOf I vanhoe )  = 

K( Aut horOf Waverley  —  AuthorOf I vanhoe ) • 

Since  the  antecedent  of  (2)  happens  to  be  -true,  we  get  the 
paradoxical  result  that,  by  virtue  of  the  theoremhood  of  (2), 
that  a  KB  should  Know  that  Scolt  wrote  both  I vanhoe  and  Waverley . 
All  that  appears  to  be  required  for  an  identity  sentence  to  be 
known  is  that  it  siaply  be  true.  Yet  we  certainly  can  imagine  a 
KB  being  told  that 

Wrote ( Sc  ot  t , Waverley ) 

-*Wrote(Sco±t,  I  vanhoe  ) 

Wrote(Asiraov, I vanhoe ) • 
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The  resolution  of  this  paradox  does  not  require  abandoning 
the  quantification  into  an  "opaque"  context,  as  suggested  by 
[Quine  71] •  A  careful  reading  of  (1)  will  reveal  that  all  it 
asserts  is  that  the  self — i denti ty  of  any  element  of  U  (or  N)  is 
known  which  is  certainly  uncon troversial •  But  the  question 
remains  as  to  whether  every  true  identity  sentence  is  known*  The 
answer  is  yes  but  this  is  merely  a  comment  on  the  expressive 
power  of  KFOPCE*  The  reason  all  true  identity  sentences  are 
known  is  that  we  only  have  a  meager  set  of  identity  sentences* 
The  only  ones  that  are  true  are  of  the  form 

( n=n )  where  n  e  N 

and  are,  moreover,  always  true  as  a  property  of  the  language* 
The  truth  of  the  antecedent  of  (2),  however,  is  not  merely  a 
matter  of  linguistic  convention  and  depends  on  having  a  world 
where  a  certain  person  wrote  two  books*  The  conclusion  to  be 
drawn  from  all  of  this  is  that  the  statement  we  wished  to  make  is 
not  correctly  made  by  (2)*  It  simply  does  not  work  to  let 
parameters  stand  for  the  the  authors  of  these  books  because,  by 
choosing  two  parameters,  we  have  already  decided  as  a  matter  of 
linguistic  convention  that  the  authors  are  distinct*  This  is 
precisely  the  sense  in  which  parameters  are  rigid  designators: 
the  truth  or  falsity  of  their  identity  is  not  a  matter  of  fact* 
The  terms  we  really  wanted  in  (2)  should  be  non-rigid  (or  fluid) 
and  such  terms  will  be  dealt  with  in  the  next  section*  Once 
fluid  terms  have  been  introduced,  there  will  indeed  be  true 
sentences  that  are  not  known  to  be  true* 

4*5  SINGULAR  TERMS 

So  far  in  this  chapter  I  have  dealt  with  what  is  usually 
called  a  pure  first  order  logic,  that  is,  one  containing  no 
constant  or  function  symbols*  In  this  section,  I  will  extend  the 
language  to  include  function  symbols  that  can  be  used  to  form 
singular  terras* 

Def n  For  each  i=0,l,***,  FN(i)  is  a  countably  infinite  set  of 
symbols  called  the  function  symbols  of  arity  i* 
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The  function  symbols  of  arity  0  are  called  constants  and  are 
distinct  from  the  set  of  parameters* 

Def n  The  express i ons  of  the  language  form  the  least  set  such  that 
1*  Every  variable  or  parameter  is  an  expression* 

2*  If  tl,***tk  are  expressions  and  f  e  FN(k) 
then  f ( 1 1 , •  •  • f tk)  is  an  expression* 

By  a  singular  tern,  I  will  mean  any  closed  expression*  that  is, 
any  expression  without  variables*  Thus,  constants  and  parameters 
are  terms  and  expressions  built  using  terms  and  function  symbols 
are  terms* 

To  accomodate  terms  into  a  first  order  language,  we  simply 
replace  one  formation  rule  in  the  definition  of  the  language* 
Where  before  we  had 

If  el,***ek  e  N  U  V  and  p  e  Pk(-c)  then  ••• 
we  now  have 

If  e  1  ,  • •  •  ,  ek  are  expressions  and  p  e  PF(k) 
then  p(el,***,ek)  is  a  formula* 

I  will  call  the  resulting  language  that  includes  terras  FOPCT • 
However,  my  primary  interest  is  in  a  language  that  also  includes 
equality  and,  thus,  has  a  formation  rule! 

If  el  and  e2  are  expressions  then  el=e2  is  a  formula* 

The  resulting  language,  a  first  order  predicate  calculus  with 
equality  and  terms,  I  wili  simply  call  L  ( instead  of  FOPCET) • 


4*5*1  Semantics  And  Axiomat ization 

There  are  essentially  two  ways  to  understand  sentences  of  L 
depending  on  whether  terms  are  to  be  interpreted  or  not*  The 
question  centers  around  whether  or  not 

( 1 )  { Ex ) ( x=t ) 

should  be  valid  for  any  term  t*  If  it  is,  then  terms  can  be 
taken  to  denote  entities  in  the  domain  in  that  if  atx/t]  is  true, 
then,  for  some  n,  a[x/n]  is  also  true.  Conversely,  if  (1)  is  not 
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valid  then  ac£x/t]  can  be  true  and  (x)-*a  also#  For  example^  under 
this  interpretation?  we  could  have  that 

(2)  Li ves ( Santa , Nor thPole) 

is  true  for  some  world  description  (where  Santa  is  not  a 
parameter)  while  also  allowing  that 

( x) ~*Live (x»  NorthPole) 

is  also  true*  The  only  way  this  can  be  prevented  is  when 

(3)  (Ex) (x=Santa) 

is  also  true*  This  leads  to  what  is  normally  called  a  "free 
logic"  [VanFrassen  66]  where  terms  do  not  necessarily  carry  an 
existential  presupposition*  01  course*  the  sense  in  which  (2) 
can  be  true  but  (3)  false  is  far  from  clear  and  has  been  the 
subject  of  considerable  philosophical  controversy  (see  (Linsky 
77 ]  for  a  survey)*  Rather  than  plunge  into  this  controversy*  I 
will  simply  take  the  most  conservative  route  here  and  assume  that 
all  terms  are  intended  to  denote  entities  in  the  domain  of 
discourse*  Thus*  Santa  would  not  be  a  term  at  all,  but  perhaps  a 
one  place  predicate  where 

( x) ( y) C Santa ( x) ASanta ( y)  ^  (x=y) ] 

would  be  a  postulate  stating  that  there  is  at  most  one  Santa* 
The  intent  of  (2)  would  then  be  expressed  by  something  like 

(x)£Santa(x)  =>  Lives  (  x  *  Nor  thPole  i  ] 

while  (3)  would  be  rephrased  as 

( Ex ) Sant  a ( x  )  • 

The  key  point  regarding  the  semantics  of  terms  in  L  is  that 
although  terms  will  always  denote  entities  in  the  domain,  the 
entities  denoted  depend  on  the  world  being  described*  In  other 
words,  not  all  terms  are  rigid  designators  but  might  be  called 
f 1 ui d  designators  instead*  For  example, 

Plan et ( Venus )  a  Plane t ( MorningS tar )  a  Plane t ( EveningS tar ) 


may  imply  the  existence  of  1,2  or  3  planets  depending  on  which 
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"terms  are  constants  and  which  parameters* 

To  achieve  the  fluidity  of  terras,  a  world  description  must 
not  only  determine  the  truth  value  of  primitive  sentences,  but 
also  the  referent  of  primitive  terms* 

Defn  PTERM  =  (f(nl,...nk)  |  ni  e  N  and  f  e  FN ( k ) } , 

defines  the  primitive  terms* 


A  world  description  is  now  factored  into  two  parts:  a  sentence 

evaluator  and  a  term  evaluator* 


Defn  SE  =  [PRIM  -•  [T,F]  3,  the  set  of  sentence  evaluators* 

Defn  TE  =  [PTERM  -*  Nj,  the  set  of  term  evaluators* 

Defn  WD  =  SE  *  TE,  the  set  of  world  descriptions* 

The  value  of  any  term  with  respect  to  any  world  description  is 
defined  by  a  terra  interpretation  function  E: 

Defn  E  e  [TERM  x  WD  -  N ]  is  defined  by 

1*  E(n,<s,e>)  =  n  for  any  n  e  N 

2.  E(f(tl,***tk) ,<s,e>)  =  elf (nl,. *.nk) )  where 
ni  =  E ( ti , <s , e> ) ,  i= 1 , 2, . . *k 

Note  that  the  interpretation  of  parameters  is  independent  of  the 
term  evaluator*  To  deal  with  a  universal  domain  U,  we  would 
simply  allow  that 


1*  E(n,<s,e>)  =  d(n) 


where  d  is 
(  s  en  t  e  nc  e  ) 

Defn  I  e 

1  . 

2. 


some  predefined  bijection  between  N  and  U. 
interpretation  function  I  now  becomes 

[Lx  WD  -  (T , F j 3  is  defined  by 

I (p ( 1 1  ,  .  . • ,tk)  ,<s , e>)  =  slplnl,  **.nk)  I  where 

ni  —  E(ti,<s,e>)  i=l,2,***k 

I(tl=t2, <s,e>)  =  T  if  E ( t 1 , <s , e> )  =  E(t2,<s,e>) 

=  F  otherwise 


•  • •  as  before 


The 


Turning  now  to  the  axiomatization  of  L, 

is 


the  main  property  we 
true  for  every 


want  to  guarantee 


that  if  something  is 
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parameter)  then  it  also  true  lor  any  term  since  the  value  of  the 
term  must  be  one  of  the  parameters*  In  lactt  this  is  the  only 
change  that  has  to  be  made:  replacing  A5  by  A5*  which  is 

A5*.  (x)a  3  a[x/t] 

Note  that  an  immmediate  consequence  of  this  is  that 
P  ( t )  3  (  Ex) p( x ) 

is  a  theorem  (as  it  should  be ) «  The  fact  that  every  term  denotes 
an  element  of  the  domain  follows  from  AEl  and  A5*: 


1.  nl=nl  AEl 

2.  (x)  (x=x)  1 t  UGE 

3.  ( t=  t )  2 * A5* 

4 .  ( Ex ) ( x= t )  3*A5* 


In  addition*  we  have  the  property  that  if  tl  and  t2  are  terms  and 
a  has  one  free  variable  x  then 

H  (tl=t2)  3  (a( x/tl ]  =  a[x/t2]) 

as  a  simple  consequence  of  the  indi seer n ibili ty  of  identicals 
theorem  (section  4 • 4 • 2) • 


4.5*2  The  Knowledge  Language 


To  incorporate  terms  into  the  knowledge 
semantics  and  axioma tiza tion  musty  once  again*  be 
new  language*  called  KL *  is  the  obvious  syntactic 
of  KFOPCE  which  includes  terms. 


language*  the 
adjusted.  The 
generalizati on 


The  main  point  regarding  fluid  terms  in  KL  is  that  a  KB  need 
not  know  what  entity  in  the  domain  such  a  term  refers  to.  In 
other  words  we  will  not  want  the  sentence 


( Ex) K ( x=  t  ) 


to  be  a  theorem*  in  general*  for  every  t.  Otherwise*  we  would  be 
presuming  that  a  KB  always  has  enough  information  to  rule  out  all 
but  one  terra  evaluator.  To  simplify  thg  discussion*  I  will 
define  a  syntactic  abbreviation  for  the  above  sentence. 
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Kref  e  is  an  abbreviation  for  (Ex)K(x=e) 

where  x  is  some  variable  not  appearing  In  expression  e* 

So  t  for  any  parameter,  we  have  that 

H  Kref  n 

but  we  will  want  that  even  if 
Kref  bill 

is  true,  "this  does  not  mean  that 
Kref  father ( bill) 

is  true •  Just  because  you  know  who  Bill  is,  you  need  not  know 
hi s  father • 

The  major  implication  of  all  this  is  that  the  sentence 

(1)  KStud en t ( f a ther ( bi 11 ) )  3  (Ex) KStudent(x) 

need  not  be  true*  The  KB  can  know  that  the  father  of  Bill  is  a 
student  without  there  being  any  known  students  since  it  may  fail 
to  know  who  the  father  of  Bill  is*  However,  if  the  KB  knows 
Bill's  father,  then  (1)  will,  be  true*  The  problem  here  is  that 
( 1)  follows  directly  from 

(  x )  a  3  ac£x/t] 

which  is  the  axiom  schema  A5* •  So  if  we  want  to  allow  the 
negation  of  (1)  to  be  consistent  ( satisliable) ,  the  axiom  A5* 
will  have  to  be  revised* 

One  way  to  achieve  the  intended  effect  is  to  make  sure  that 
the  substitution  of  x  by  t  in  a[x/t]  never  places  a  t  within  the 
scope  of  a  K*  This  not  quite  right,  however,  since  rigid  terms 
can  be  placed  within  a  K*  Rather,  it  is  function  (or  constant) 
symbols  that  cannot  be  place  within  the  scope  of  a  K*  The 
easiest  way  to  do  this  is  to  revise  our  notion  of  a  free  or  bound 
primitive  to  allow  lor  fluid  terms* 

Dein  An  occurrence  of  a  function  symbol  or  predicate  symbol  is 
bound  if  it  is  within  the  scope  of  a  K  and  free  otherwise. 


Eefn  A  sentence  of  KL  is  pure  if  it  contains  no  free  occurrences 
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of  function  or  predicate  symbols* 

This  definition  of  purity  subsumes  all  previous  ones  including 
the  generalization  for  equality*  Given  these  definitions,  the 
new  version  of  A5,  which  I  call  A5T  is 

(x)a  3  a[x/t]  with  proviso 

where  the  proviso  is  that  no  symbol  of  t  becomes  bound  in  the 
substitution  a[x/t]*  The  complete  proof  “theory  of  KL  is, 
therefore , 

Axioms  A1 ,  A2,  A3,  A4  and  KAl,  KA2,  KA3 ,  KA4  and 


AEl  . 

(n=m)  n  e  N 

AE2. 

( n* n1)  n,  n®  e  N, 

distinct 

AST. 

(x)q(  3  a[x/t]  with 

proviso 

KA5T. 

K[  (x)  a  =>  atx/t]  ] 

with  proviso 

KMP  • 

Kicx^fi)  3  (Ka=>Kjo) 

KUG. 

(x)Kcr  =  K  (  x  )  a 

MK. 

a  —  Ka 

Kul es  of  Inf  ere  nee  MP  and  UGE* 

The  semantics  of  KL  is  the  obvious  generalization  of  both  L  and 

kfopce: 

Defn  V  e  [  KL  x  WD  *  MD  -  CT,F}]  is  defined  by 

1*  V (p( 1 1  ,  •  •  •  ,  tk)  ,w,m)  =  I  ( p(  t  1 , • •  •  tk)  , w ) • 

2*  V(tl=t2,w,m)  —  i(tl=t2,w|* 

• • •  as  before • 

One  thing  to  notice  about  KL  is  that  while 
(x)  (y)  [  (  x=y  )=>K(x=y)  ] 

is  still  a  theorem,  there  will  be  terms  tl  and  t2  such  that 
( 1 1  =  t2 )  o  K(tl=t  i) 

is  not  a  theorem*  This  is  because  A5'  has  been  revised  to 
prohibit  substitutions  of  some  terms  within  the  scope  of  a  K* 
Returning  to  our  example  of  section  4*4*4,  if  we  assume  that 
"Author"  is  an  element  of  FN ( 1 ) ,  then 


Author ( Waver ley )  =  Author ( Ivanhoe ) 
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does  no t  imply  that 

K[ Author ( Waverley  )  =  Author! Ivanho e)  ]  • 

So »  unlike  KFOPCE,  KL  does  have  true  identity  statements  that  are 
not  known  to  be  true# 

The  most  important  property  of  KL,  however,  is  that  the 
axionati zat ion  is  both  sound  and  complete  with  respect  to  the 
given  semantics#  To  confirm  the  fact  that  I  have  neither 
overstated  nor  understated  the  proof  theory,  I  will  once  again 
review  the  proofs  of  section  three# 

The  soundness  of  KL  is  based  on  the  validity  of  the  axioms 
and  the  fact  that  MP  and  UGE  continue  to  preserve  validity#  The 
only  axiom  that  requires  verification  here  is  A5T  since  all  the 
others  are  the  same  as  KFOPCE  except  for  KA5T,  whose  validity 
will  follow  from  that  of  A5T# 

Lemma  If  E(t,w)=n  and  a[ x/ t]  satisfies  the  proviso, 

then  V ( a [ x/ t  ]  , w , m )  =  V ( a[ x/n ] , w, m ) 

Proof:  by  induction  on  the  length  of  a# 

The  lemma  holds  for  equality  sentence  and  application  of  a 
predicate  to  arguments  by  definition  of  I#  It  also  holds 
for  negations,  material  implications  and  universal 
generalizations  by  induction#  Consider  a  formula  Ka#  If 
Ka[x/t]  satisfies  the  proviso,  then  either  a  has  no  free  x 
or  t  is  a  parameter#  Either  way,  the  lemma  will  hold. 

The  fact  that  A5T  is  valid  follows  directly  from  this  lemma. 

Turning  now  to  the  completeness  proof  for  KL,  lemmas  1,  2, 

3,  4  and  5  remain  unchanged  from  KL •  For  lemma  6,  there  are 

three  additional  properties  that  the  truth  set  X  must  satisfy: 

6#  For  each  t,  there  is  one  n  such  that  (t=n)  e  X. 

7.  ( 1 1= 1 2 )  e  X  iff  ( tl=n)  , ( t2=n )  e  X,  for  some  n. 

8.  p(tl,...tk)  e  X  iff  p(nl,.##nk),  (ti=ni)  e  X 

for  some  nl ,  n2 ,  •••  nk# 

I  will  examine  each  of  these  properties  in  turn# 
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The  fact  that  there  is  some  n  such  that  ( t — n )  is  in  X  is 
guaranteed  by  the  theoremhood  of  (Ex)(t=x.J#  Moreover,  there  can 
only  be  one  such  n,  since  if  (  t=nl  )  and  ( t=n2j  are  in  X  then  so 
is  ( nl=n2 ) • 

As  for  property  7,  if  ( tl=n)  and  (t2=n)  are  both  in  X,  then 
(  1 1  =  1 2  )  is  as  well  since  equality  is  provably  syrame trie  and 
transitive#  Conversely,  if  (tl=t2)  is  in  X  along  with  ( tl=nl) 
and  (t2=n2)  by  property  6,  then  ( n 1  — n 2 )  most  be  as  well  so  nl  and 
n2  are  identical# 

Finally,  assume  (tl=nl),  ••#  ( tk=nki  are  all  in  X  by 
property  6#  Then,  p(tl,###,tk)  is  in  X  iff  p(nl,###,nk)  is  by 
the  provable  i ndi scernibi li ty  of  identicals,  guaranteeing 
property  8# 

So  truth  sets  for  KL  do  satisfy  these  additional  properties 
for  lemma  6  and,  the  completeness  of  KL  follows  directly# 

A  couple  of  additional  properties  of  KL  are  worth 
mentioning#  The  first  is  that  knowing  the  referent  of  a  term  is 
equivalent  to  being  able  to  decide  whether  any  individual  is  that 
term# 

Def  n  Ki  f  a  is  a  syntactic  abbreviation  for  (Ea  v  K-#o)  • 

Theorem  I-  (  Kref  t)  =  (x)Kif  (x=t)  • 

Proof:  using  the  completeness  of  KL# 

Suppose  Kref  t  is  true#  For  some  n,  K(n=t)  is 
therefore  true#  Let  n*  be  any  parameter#  If  n*  is  n  then 
K(n'=t)  is  true!  if  not,  K(n'*n)  is  true  and  since  K(n=t) 
is  true,  then  so  is  K(n'*t)#  Either  way,  Kif ( n*  = t )  is  true# 
Since  this  holds  for  any  n* ,  the  universal  generalization  is 
also  true# 

Now  suppose  that  (x)Kif(x=t)  is  true#  For  every  n'» 
Ki f  ( n 1  =  t )  is  true#  If  for  every  n*  K(n**t)  were  true,  then 
so  would  K(x){x*t)  which  cannot  be  since  (Ex)(x=t)  is  a 
theorem#  Thus,  for  some  n'»  K(n*=t)  is  true  and,  therefore, 
so  is  Kref  t# 
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The  second  property  of  KL  worth  noting  is  that  the  more 
general  form  of  the  axiom  of  specialization  (A5)  can  be  used 
whenever  the  referent  of  the  term  in  question  is  known. 

Lemma  Let  nl  and  n2  be  parameters  such  that  E(tfw)=nl  and  for 
every  w*  in  m,  E(t,w* )=n2.  Moreover»  assume  that 
V( a[ x/nl  ]  , w , m )  =  V ( a [ x/n2 ] , w, o ) • 

Then  V( a [ x/n 1  ]»w,ra)=V(a{x/t] ,  w  ,ra  )  • 

Proof:  by  induction  on  the  length  of  a. 

The  lemma  holds  for  p(tl,...tk)  and  (tl=t2)  by  definition  of 
I.  It  also  holds  for  negations,  material  implications  and 
generalizations  by  induction.  Finally,  consider  a  formula 
Kcr.  By  supposition,  Ka[x/nl  ]  is  true  iff  Ka[x/n2J  is  true. 
Kor[  x/n2  ]  is  true  iff  for  every  w*  in  m,  V  (  a  [  x/ n2  3 ,  w 1  ,4j)  is 
T.  For  each  w*  in  ra,  E(t,w')  is  n2,  so  by  induction,  this 
holds  iff  for  every  w*  in  m,  V  (a[ x/ 1  ] , w '  , o )  is  T. 
Consequently,  Ka[x/n2]  is  true  iff  Ka(x/t ]  is  true. 

Theorem  H  Kref  t  =  [(x)a  =>  a[x/t]]  without  proviso. 

Proof!  using  the  completeness  theorem  for  KL. 

Assume  (x)ac  and  Kref  t  are  both  true.  Thus,  for  some  nl  and 
n2,  (t=nl)  and  K(t=n2)  are  both  true.  Since  (x)a  is  true, 
then  so  are  both  a[x/nl ]  and  a£x/n2]  and  so,  by  the  lemma, 
a[x/t]  is  also  true. 


4.5.3  Terms  Without  Equality 

In  this  final  subsection,  I  will  briefly  consider  a  language 
that  has  singular  terms  but  no  identity  relationship.  This 
language,  KFOPCT ,  has  the  obvious  semantics  which  is  that  of  KL 
minus  the  provision  for  equality.  Similarly,  the  proof  theory  is 
KL 1 s  without  the  axiom  schemata  AE 1  and  AE  2  and,  optionally,  with 
the  rule  UGE  once  again  demoted  to  UG . 

One  thing  to  notice  about  this  logic  is  that  the  proviso  in 
the  axiom  of  specialization  (A5)  involves  making  sure  every 
occurrence  of  a  function  symbol  remains  free  after  a 
substitution.  This  is  reminiscent  of  the  standard  proviso  in 
first  order  logic  regarding  the  axiom  of  specialization  where 
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some  care  is  necessary  to  avoid  binding  tree  variables  during 
substitution®  In  fact,  it  is  precisely  this  difficulty  that  I 
attempted  to  avoid  using  parameters  instead  of  free  variables® 
But  novf  given  the  necessity  for  the  proviso,  I  will  consider 
what  simplifications  can  be  made  to  the  overall  logic  when  free 
variables  are  used  instead  of  parameters® 


The  major  idea  behind  the  simplification  is  to  consider  both 
universal  quantifiers  and  the  K  symbols  as  binding  symbols  for 
other  symbols;  universal  quantifiers  bind  variables  while  the  K 
symbol  binds  function  and  predicate  symbols® 


De f n  An  occurrence  of  a  variable,  function  or  predicate  symbol 
can  be  either  free  or  bound ®  A  variable  x  is  bound  iff  it 
appears  within  the  scope  of  the  quantifier  lx);  a  function 
or  predicate  symbol  is  bound  iff  it  appears  in  the  scope  of 
a  K® 


Def n  Let  Q  be  a  binding  symbol  (universal  quantifier  or  K) •  A 
formula  a  is  pure  with  respect  to  Q  iff  every  free 
occurrence  of  a  symbol  in  a  is  also  free  in  Qa® 


Given  this  generalization  of  free  or  bound  occurrences,  the 
proviso  for  the  axiom  of  specialization  is  simply  that  no  symbol 
(variable,  function  or  predicate)  of  a  term  t  should  become  bound 
in  a[x/t]®  This  handles  correctly  both  free  variables  as  in 
standard  first  order  proof— theory  and  fluid  terms  for  KFOPCT  as 
well®  This  leads  to  a  new  proof  theory  for  KFOPCT  where  free 
variables  are  used  instead  of  parameters  and  Q,  Q*  are  allowed  to 
stand  for  any  binding  symbol: 

Axioms  Al,  A2,  A3  and 

QMP®  Q( asp)  =  ( Qa=Qp) 

QMK®  a  =  Qa  provided  a  pure  wrf  Q 

QSW  •  QQ  *  a  =3  Q*  Qa 

QA5®  (x)a  3  a£x/t]  with  proviso 
Rules  of  Inf ere  nee  MP  and 

QG®  From  a  to  infer  Qa:® 

If  we  let  |  h-  be  the  provability  relation  for  this  proof  —  theory , 
then  it  can  be  shown  that  it  is  equivalent  to  the  standard  one  H- 
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derived  from  restricting  KL  in  the  obvious  way. 

Theorem  |  H  a  id! f  Ha. 

Proof  of  if  I  by  induction  on  the  length  of  the  derivation. 

The  axioms  Al,  A2»  A3  and  A5  are  present  in  the  new  theory. 
The  axioms  A4  and  KMP  are  subsumed  by  QMP  ,  KUG  by  QSW  and  MK 
by  QMK.  The  axioms  KAl t  KA2 »  KA 3  ,  KA4  and  KA5  are  thus 
provable  by  using  QG  where  the  Q  is  K«  Finally,  MP  is 
present  and  UG  is  subsumed  by  QG . 

Proof  of  only  if:  again  by  induction  on  the  derivation. 

The  axioms  Al,  A2,  A3  and  QA5  are  present  in  the  old  theory. 
The  axiom  QMP  is  handled  by  A4  and  KMP •  QMK  is  handled  by 
MK  and  a  theorem  of  first  order  logic  when  Q  is  not  K. 
Simalrly,  QSW  is  a  theorem  of  KFOPCT  for  any  choice  of  Q  and 
Q* •  Finally,  MP  is  present  in  the  old  theory  and  QG  is 
handled  by  UG  and  KNEC. 

Apart  from  the  fact  that  this  new  proof  theory  is  much  more 
concise  than  the  old  one,  the  important  point  is  that  it  does  not 
mention  K  anywhere.  This  is  a  unified  view  of  quantification 
where  K  is  treated  as  a  quantifier  binding  its  own  symbols.  In 
fact,  a  sentence  like 

Kp{  t  ) 

can  be  viewed,  in  some  sense,  as 
(  x) p ( x, t  ) 

where  x  does  not  appear  in  t  and  is  understood  as  being  something 
like  a  situation  variable  [McCarthy  and  Bayes  69].  This  can  be 
made  more  precise  as  follows: 

Let  a  be  any  sentence  of  KFOPCT  and  suppose 
x  does  not  appear  in  a 
Let  a*  be  defined  by  replacing 

p(tl,...,tk)  by  p ( x , t 1 , • • • tk ) 
f(tl,...,tk)  by  f (x, t 1 , •• • tk) 
and  K  by  ( x)  • 

Th  eorem  If  H  a  then  a*  is  a  theorem  of  FOPCT. 

Proof:  by  induction  on  the  length  of  the  derivation. 
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If  a  is  an  Instance  of  Al *  A2,  A3  or  CMP  or  QSW,  then  a*  is 
clearly  a  theorem  of  FOPCT*  If  a  is  an  instance  of  QA5f 
then  a*  satisfies  the  proviso  of  A5  from  FOPCT  since  x  does 
not  appear  in  a.  If  a  is  an  instance  of  QMK  ,  the  a*  is  a 
theorem  of  FOPCT  since  what  is  free  and  bound  in  a*  is  the 
same  as  in  a  »  If  a  follows  from  p  and  (p^a)  ,  then,  without 
loss  of  generality,  assume  x  is  not  in  p  and,  by  induction, 
both  p *  and  (>3=>a)*  are  theorems  of  FCPCT*  Consequently,  a* 
is  as  well  since  { p^a )  *  is  (p*=>a*).  Finally,  assume  Qa 
follows  from  a  by  QG«  By  induction  a*  is  a  theorem  of  FOPCT 
and  so  (Qa)*  must  be  as  well  by  universal  generalization* 

Note  that  the  converse  of  this  theorem  is  not  true  since,  for 
exampl e , 

(x)p(x,t)  m  p ( x , t ) 
is  a  theorem  of  FOPCT  but 
Kp ( t )  m  p ( t  ) 

is  not.  However,  the  converse  will  hold  when  the  original 
sentence  of  KFOPCT  is  pure  (with  respect  to  K)  as  the  following 
theorem  demonstrates. 

Theorem  If  a  is  pure  and  a*  is  a  theorem  of  FOPCT, 

then  a  is  a  theorem  of  KFOPCT. 

Proof:  by  induction  on  the  length  of  the  proof?  of  a*. 

If  a*  is  an  instance  of  Al,  A2,  A3  or  A4 ,  then  so  is  a. 
Suppose  a*  is  an  instance  of  A5 •  If  the  variable  of 
quantification  is  not  x,  then  a  is  an  instance  of  A5  too. 
If  the  variable  is  x,  then  a  must  be  of  the  form  Kp=>p  which 


is  a  theorem 

since  p  must:  be 

pure  for  a 

to 

be  pure. 

I  f  a* 

follows 

f  r  om 

(p*=>a*)  and 

/>*,  then 

by 

induction 

a  is  a 

t  heorem. 

I  f 

Qa*  follows  from 

a*  by  UG, 

then  regardless  of 

what  the  Q  is,  Ka  and  Qa  are  theorems  by  QG. 

This  last  theorem  guarantees  that  any  proof  procedure  for  first 
order  logic  (such  as  resolution  [Robinson  65])  can  be  used 
directly  for  the  pure  sentences  of  KFOPCT.  Moreover,  the  mapping 
between  the  two  languages  is  straightforward  and  does  not  involve 
the  introduction  of  any  new  function  or  predicate  symbols. 


No  t  e 
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that  the  conversion  does  require  changJLng  monadic  predicates  into 
binary  ones  which  is  to  be  expected  given  fhe  undecidability  of 
monadic  KL« 


CHAPTER  5 

THE  OPERATIONS  ON  KNOWLEDGE  BASES 


5*1  Knowledge  Base  Queries 
5*2  Knowledge  Base  Updates 
5*3  The  Update  and  Query  Theorems 
5*3*1  Definitions 
5*3*2  Proofs 
5*3*3  Remarks 
5*4  Limitations 


In  this  chapter*  I  will  examine  how  the  language  KL  can  be 
used  to  query  and  to  update  a  KB*  In  other  words*  this  chapter 
treats  KL  not  as  a  language  for  talking  about  a  KB,  but  as  a 
language  for  talking  to  a  KB* 

The  main  point  of  this  chapter  is  that  a  KB  can  be  viewed, 
in  some  sense*  as  an  abstract  data  type  [Liskov  and  Zilles  74] 
interacting  with  the  outside  world  in  teres  of  two  operations: 

The  operation  TELL  takes  an  abstract  KB  and  a  sentence  of  KL 
and  produces  a  new  KB  that  knows  that  the  sentence  is  true* 

The  operation  ASK  takes  an  abstract  KB  and  a  sentence  of  KL 
and  returns  one  of  yes,  no  or  unknown  depending  on  what  the 
KB  knows  about  the  world* 


The  idea  is  that  a  user  of  a  KB  (man  or  machine)  should  be  able 
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"to  interact  with  a  KB  independently  of  how  the  knowledge  is 
represented.  For  example,  the  KB  might  be  represented  by  a 
semantic  network,  a  PLANNER  style  database,  or  as  a  set  of 
sentences  of  L.  Even  if  this  last  choice  is  made,  there  are 
still  a  number  of  ways  to  represent  what  is  known.  For  example, 
that  Bill  Teaches  Mary  could  be  represented  by 

(Teaches ( Bill , Mary) ) 

or  (( Ex ) Teaches ( x , Mary )  a  (x=Bill)) 

or  ([ Teaches ( Bill , Mary )  a  (Mary=Mary) ),  (Ex) (x=Bill)) . 

However,  no  matter  how  the  knowledge  is  represented,  there  is  an 
abstract  KB  that  underlies  this  knowledge!  the  model  description 
defined  by 


(w  |  I ( T  eac 


which  is  an 
approach  of 
abstract  KB 
without  ever 


unco 

th 

such 

acc 


un  t 
i  s 
as 
ess 


h { Bill , Ma  ry ) , w) 

ably  infinite 
chapter  is  that 
this  one  using 
ing  the  finite 


=  T) 

set  of  functions.  So, 
a  user  should  interact  wi 
(concrete)  sentences  o 
representation  of  the  KB. 


th 

f 


the 

an 

KL 


In  the  next  two  sections,  I  will  consider  the  definitions  of 
ASK  and  TELL  on  abstract  knowledge  bases  and  examine  some  of 
their  properties.  In  section  three,  I  will  consider  how  these 
operations  are  to  be  realized  on  knowledge  bases  represented  as 
finite  sets  of  first  order  sentences.  Finally,  some  comments 
will  be  made  about  non— representable  knowledge  bases. 

This  chapter  contains  two  major  results  which  relate  the 
operations  on  abstract  KB's  to  those  on  their  concrete 
representations.  The  theorems  I  will  prove  can  be  viewed  in  two 
ways.  First  of  all,  viewing  an  abstract  KB  as  a  semantic  notion 
and  a  concrete  KB  as  a  syntactic  or  proof  theoretic  one,  the 
theorems  can  be  seen  as  soundness  and  completeness  type  results 
for  the  TELL  and  ASK  operations.  In  this  sense,  the  theorems 

demonstrate  the  equivalence  between  semantic  and  syntactic 

\ 

definitions  of  TELL  and  ASK.  Alternately,  the  two  theorems  can 
be  viewed  as  demonstrating  the  correctness  of  a  representation  of 
an  abstract  KB.  The  representation  is  correct  in  the  sense  that 
the  operations  defined  on  the  representation  correspond  exactly 
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to  the  operations  on  the  abstract  KB. 


5*1  KNOWLEDGE  BASE  QUERIES 

In  this  section*  I  will  briefly  consider  the  definition  of 
the  function  ASK  which*  given  a  sentence  of  KL  and  a  model 
description*  has  as  value  either  yes*  no  or  unknown,  depending  on 
whether  the  sentence,  its  negation  or  neither  is  known  to  be 
true*  In  fact,  we  have  implicitly  used  a  version  of  ASK  every 
time  we  considered  what  was  known  by  a  KB.  The  definition  itself 
is  quite  direct: 


Def  n 


ASK  e  [KL  x 
ASK(a*m)  = 


MD  -*  (yes  *  no  *  unknown]  ] 
yes  if  V(Ka,m)  =  T 
no  if  V(K-«a,m)  =  T 
unknown  otherwise. 


is  defined  by 


So  ASK  simply  checks  whether  the  query  or  its  negation  is  known 
and  answers  accordingly.  Note  that  for  pure  sentences,  ASK  will 
always  be  yes  or  no,  confirming  the  fact  that  a  KB  will  always 
know  everything  about  itself. 


It  is  perhaps  worthwhile  at  this  stage 
behaviour  of  ASK  with  respect  to  a  reasonably 
will  also  serve  as  a  reminder  of  the  expressive 
be  gained  by  allowing  all  of  KL  to  be  used  as 
Assume  a  KB  knows  just  the  following: 


to  examine  the 
complex  KB.  This 
power  that  is  to 
a  query  language. 


Example  KB 

Teach ( john , mary )  Teacht  george, sue) 

[ Teach( j ohn , sue )  v  Te ach ( bill , sue )  ] 

( Ex) Teach (x , joan) 

( x) [ Teac h ( x , ann )  =  (x=bill)j 

(x)  (y)[Teach(x,y)  =>  y=mary  v  y=sue  v  y=joan  v  y=ann  ] 

Now  I  will  present  questions  to  this  KB  (in  KL  and  in  English) 
and  consider  what  ASK  will  return  in 


1. 


Teach ( j ohn , mary )  YES 

Does  John  teach  Mary? 


each  case. 
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2*  Teach( j ohn , ann )  NO 

Does  John  teach  Ann? 

3.  Teach( john  ,  sue )  UNKNOWN 

Does  John  teach  Sue? 

4*  KTe ach( joh n , sue )  NO 

Do  you  know  that  John  teaches  Sue? 

5«  (  Ex  )  Teach  (  x  f  joani)  YES 

Does  anyone  teach  Joan? 

6.  (Ex)KTeach(x, joan)  NO 

Do  you  know  anyone  that  teaches  Joan? 

7*  ( Ex ) KTeach ( x f sue )  YES 

Do  you  know  anyone  that  teaches  Sue? 

8.  (  Ex  )  C  Te  ach  (  x  ,  sue  )  A-»KTeach  (  x,  sue  }  ]  YES 

Does  anyone  teach  Sue  apart  from  her  known  teachers? 
or 

Are  you  missing  any  of  Sue's  teachers? 

9.  (  Ex )  [  Teac  h  ( x »  ann )  A-«KTeach  (  x»  ann  )  3  NO 

Are  you  missing  any  of  Ann's  teachers? 

10*  (  Ex  )[  Teac  h  (  x  »  mary)  a-»  KTeach  (  x  t  mary  )  ]  UNKNOWN 

Are  you  missing  any  of  Mary's  teachers? 

11*  (  Ey  )  K-»  (  Ex)  [  Teach  (  x»  y  )  A-«KTeac  h  (x»  y  )  3  YES 

Do  you  know  anyone  for  which  you  have  a  complete  list  of 
t  eacher  s? 

12.  (Ey)  (  y*  mary  )  A-iKi  f  (  (  Ex  )  Teach  (  x  r  y )  a -nKTeach  (  x  »  y  )  3  NO 

Is  there  anyone  other  than  Mary  such  that  you  don't  know 
whether  or  not  you  are  missing  any  of  her  teachers? 


This  last  question  is  answered 
that  it  is  missing  none  of 
Sue's  and  one  of  Joan's.  Since 
that  could  have  a 
uncertainty  about. 


in  the  negative  since  the  KB  knows 
Ann's  teachers  and  at  least  one  of 
Mary  is  the  only  other  person 
is  nobody  else  to  have 


teacher  t 


there 
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One  thing  to  notice  about  ASK  is  that  it  is  a  non— mono  tonic 
operator  [McDermott  and  Doyle  78 ]«  One  might  expect  that»  as 
information  is  acquired)  the  only  thing  that  happens  is  that 
questions  that  were  previously  answered  unknown  are  now  answered 
either  yes  or  no*  In  fact,  what  can  happen  is  that  questions 
that  were  previously  answered  yes  (or  no)  may  now  be  answered  no 
(or  yes)  *  Consider  ,  for  example,  the  above  KB  finding  out  that 
Bill  does  not  teach  Sue  (and,  therefore)  that  John  teaches  Sue)* 
Whereas  we  previously  had 

KTeach( j  ohn  y sue ) 

being  answered  no ,  it  would  now  be  answered  yes*  This  is  to  be 
expected,  of  course y  since  questions  such  as  these  make  reference 
to  what  is  known  by  the  KB  about  itself*  Just  because  something 
is  unknown  does  not  mean  it  will  continue  to  be  unknown  as 
information  is  acquired*  in  other  words,  met  a— knowl edge  need  not 
be  conserved  as  information  is  gathered  about  the  world* 
However,  world  knowledge  will  be  maintained  as  information  is 
obtained*  The  only  belief  revision  that  takes  place  will  involve 
me ta- knowledge* 

One  final  observation  regarding  ASK  is  concerning  its 
i n  trac  tab il ity • 

Theorem  Y  =  {at  |  ASK(a,WD)  =  yes)  is  not  recursively  enumerable* 
Proof:  by  contradiction* 

Suppose  Y  was  recursively  enumerable*  Then  so  would  be  the 
set  of  all  'nK-ia  in  Y  such  that  <x  is  a  sentence  of  L* 
However,  this  set  is  the  set  of  all  satisfiable  sentences  of 
L,  which  is  not  recursively  enumerable* 

So  even  in  the  simplest:  case  where  nothing  is  known  about  the 
world,  the  set  of  sentences  for  which  ASK  returns  yes  is  not  only 
not  recursive,  but  not  even  recursively  enumerable*  This  settles 
the  case  once  and  for  all  as  to  whether  we  should  expect  any 
algorithm  to  handle  the  ASK  function  in  its  full  generality*  As 
pointed  out  in  [Reiter  80],  non— mono toni c  processes  seem  to 
inherently  run  into  this  kind  of  difficulty  and  require 
heuristics  of  some  sort*  Nonetheless,  in  section  three,  I  will 
present  a  proof  theoretic  analogue  of  ASK  with  the  understanding 
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"that  "the  proof  "theory  cannot  be  axiomatic  since  the  "theorems" 
are  not  recursively  enumerable* 

5.2  KNOWLEDGE  BASE  UPDATES 

In  this  section*  I  will  consider  the  definition  of  the 
function  TELL  which*  when  given  a  model  description  and  a 
sentence  of  KL*  has  as  value  the  new  model  description  that  knows 
that  the  sentence  of  KL  is  true.  I  will  proceed  in  two  steps! 
first  *  I  will  consider  the  simpler  case  when  the  sentence  passed  ' 
to  TELL  is  a  sentence  of  LJ  next*  I  will  generalize  to  allow  any 
sentence  of  KL  to  be  used. 

As  described  in  chapter  three*  there  is  a  natural 
interpretation  of  the  subset  ordering  of  model  descriptions  in 
that 

ml  c  m2  iff  ml  is  a  more  refined  view  of  the 
world  than  is  m2. 

In  other  words*  if  a  model  description  is  a  subset  of  another, 
then  the  first  has  more  information  about  the  world  than  the 
second.  Moreover*  the  two  partial  descriptions  of  the  world  are 
compatible  in  the  sense  that  the  subset  knows  everything  that  the 
superset  knew  about  the  world.  This  observation  leads  to  two 
desirable  properties  we  would  like  TELL  to  have  in  the  case  where 
the  sentence  is  from  LI 

1 •  TELL ( a  *  m )  £  m 

2.  TELL  ( a ,  ra )  £  [w  |  I(a,w)  =  T)  . 

The  first  states  that  telling  a  KB  that  a  is  true  should  result 
in  a  more  refined  view  of  the  world.  The  second  is  that  this 
should  also  result  in  a  KB  where  a  is  known  to  be  true.  Note 
that  if  a  KB  already  knows  that  a  is  false,  then  if  the  first  two 
properties  are  satisfied,  the  KB  that  results  from  telling  it 
that  a  is  true  is  inconsistent.  We  might  want  to  say  in  this 
case  that  the  addition  of  a  is  urohibi ted  to  ensure  that  nothing 


but  model  descriptions  result  from  TELL 
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The  final  property  we  want  TELL  to  satisfy  is  that  it  should 
be  the  largest  set  satisfying  both  1  and  2*  In  other  wordst  we 
want  the  KB  that  has  the  least  amount  of  information  about  the 
world  consistent  with  knowing  everything  (about  the  world)  that 
was  known  before  and  knowing  that  a  is  true*  Otherwise*  telling 
a  KB  that  a  is  true  could  result  in  knowing  many  unrelated  facts 
about  the  world*  This  suggests  the  following  definition  of  TELL 
when  the  sentence  in  question  is  an  element  of  LI 

TELL(a,m)  =  a  (1  (w  j  I(a*w)  =  T) 

This  immediately  guarantees  that  TELL  produces  the  KB  with  the 
least  amount  of  world  knowledge  that  knows  a  and  everything  it 
knew  before*  The  fact  that  both  sets  of  world  descriptions  being 
intersected  are  maximal  and  that  intersections  of  maximal  sets 
are  maximal  guarantees  that,  in  this  case*  TELL  always  produces  a 
maximal  set* 

I  will  now  consider  the  more  general  case  of  TELL  that 
allows  arbitrary  sentences  of  KL  to  be  used*  This  definition  is 
based  on  two  observations  regarding  how  KL  can  be  used  to  specify 
a  KB  • 


First  of  all*  recall  from  chapter  two  that  the  effect  of 
telling  a  KB  something  like 

[ KTeache r ( J ohn)  v  KS tuden t ( bi 11 ) ] 

cannot  simply  result  in  a  KB  that  either  knows  that  John  is  a 
teacher  or  that  Bill  is  a  student*  As  argued  in  that  chapter*  we 
cannot  expect  a  KB  to  know  one  or  the  other  simply  by  telling  it 
that  it  does  any  more  than  we  can  force  a  KB  to  have  a  known 
teacher  by  telling  it  that  it  (now)  has  one! 

( Ex ) KTeacher ( x) • 

So  either  additions  like  these  two  will  have  to  be  prohibited  or 
it  must  be  understood  that  their  addition  is  somewhat  unusual 
compared  to  additions  from  L*  In  particular*  we  will  have  to 
allow  that  for  certain  sentences  of  KL 


V ( Ka  *  TELL ( a  *  m ) ) 


F 
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even  though  this  is  never  true  when  a  is  a  sentence  of  L*  The 
reason  we  have  to  aiiow  tor  this  is  that  otherwise  we  would  have 
that 

V( K[  KpVKq ] f TELL( KpVKq.m)  )  =  T 

and,  so  V ( Kp , TELL ( . . . )  )  =  T  or  V ( Kq , TELL (  .  .  .  )  )  =  T* 

This  is  precisely  the  property  that  TELL  cannot:  be  expected  to 
have* 


The  second  point  regarding  telling  a  KB  a  sentence  of  KL  is 
that  the  main  use  of  this  is  to  inform  the  KB  about  its 
completeness  or  incompleteness  using  sentences  like 

(  Ex)  Teacher  (x)  a  -»KTeache  r  (  x ) 
or  {  x)  Student  (  x  )  =>  KStudent(x). 

The  first  of  these  tell  the  KB  that  it  is  currently  missing  a 
teacher  (since  there  is  a  teacher  other  than  the  known  teachers)  • 
The  second  tells  the  KB  that  it  currently  has  all  the  students 
(since  there  are  no  students  other  than  the  known  ones)* 
Assertions  such  as  these  are  intended  to  replace  the  closed  world 
assumption  (CWA)  or  the  open  world  assumption  neither  of  which 
can  be  assumed,  in  general,  for  an  incomplete  KB*  The  point  is 
that  if  a  KB  cannot  use  the  CWA  and  does  not  know  whether  or  not 
it  has  a  complete  list  of  students,  it  is  convenient  to  be  able 
to  inform  it  that  its  list  is  complete  when  the  situation 
warrants  it*  Similarly,  when  we  know  that  the  KB  is  missing  a 
teacher  but  it  does  not,  it  is  desirable  to  be  able  to  inform  the 
KB  about  its  incompleteness* 

This  is  the  motivation  behind  being  able  to  tell  a  KB  any 
sentence  of  KL .  I  will  derive  a  definition  for  TELL  by 
considering  its  properties  in  a  specific  example*  Consider  a  KB 
that  only  knows  that 

Teacher  (  Joh  r. )  and  Teacher  (  bill ) 

and  call  it  ml*  Let  A  be  the  open  world  statement  for  teachers: 


A 


(Ex)  [  Teacher  (  x)  a  -.KTeacher  (  x  )  ]  . 
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I  will  consider  two  other  KB*s  based  on  ml: 
m2  =  TELL ( A  ,  m  1 )  • 

m3  =  TELL ( Teacher ( george }, m2 ) • 

So  m2  is  the  result  of  telling  ml  that  it  is  missing  a  teacher 
while  m3  is  the  result  of  telling  m2  that  George  is  a  teacher* 
Note  that 

ASK  (A,  9  ml)  -  unknown 

since  ml  has  no  way  of  knowing  whether  or  not  it  has  all  the 
teachers*  John  and  Bill  may  or  may  not  be  all  the  teachers*  If 
TELL  is  behaving  properly ,  we  would  certainly  expect  that 

ASK(A,m2)  =  yes* 

That  is,  after  being  told  that  it  is  missing  a  teacher,  the  KB 
should  now  know  that  it  is  missing  a  teacher*  The  big  question, 
however,  is  what 

ASK ( A , m3 ) 

should  be*  If  the  answer  is  yes,  then  even  when  the  KB  is  told 
about  George,  it  still  thinks  it  is  missing  a  teacher*  In  this 
case,  no  matter  how  many  teachers  we  tell  it  about,  it  will 
always  think  it  is  missing  at  least:  one*  So  if  the  answer  is 
yes,  then  the  addition  of  A  not  only  tells  the  KB  it  is  missing  a 
teacher,  but  that  no  matter  how  much  additional  information  it 
acquires,  it  will  continue  to  be  missing  a  teacher* 

This  interpretation  is  obviously  stronger  than  the  one  that 
is  intended  for  A*  Rather,  A  is  intended  to  tell  a  KB  that  it  is 
currently  missing  a  teacher  not  that  it  will  always  be  missing 
one*  So,  m2  should  indeed  know  that  there  is  a  teacher  apart 
from  those  currently  known  to  be  teachers*  But,  once  m2  is  told 
that  George  is  a  teacher,  it  now  has  an  expanded  set  of  known 
teachers  and,  as  with  ml,  should  no  longer  know  whether  the  set 
of  known  teachers  is  complete*  There  may  or  may  not  be  exactly 
three  teachers*  Consequently,  we  should  expect  that 


ASK (A, m3 ) 


unknown • 
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This  is  yet  another  example  of  no n— mo not on ici ty •  The  knowledge 
the  KB  has  as  m2  is  indeed  lost  as  it  becomes  m3  andf  indeed*  m3 
has  to  be  told  whether  or  not  A  is  true. 

The  key  point  in  the  above  analysis  is  that  the  assertion  of 
^  tells  a  KB  different  things  about  the  world  depending  on  what 
the  KB  knows.  Informing  ml  that  A  is  true  tells  it  that  there  is 
a  teacher  other  than  John  or  Bill!  informing  m3  that  A  is  true 
tells  it  that  there  is  a  teacher  other  than  John*  Bill  or  George. 
In  both  cases*  however*  A  is  making  a  statement  about  the  world 
by  referring  to  what  is  currently  known. 

This  suggests  how  the  more  general  definition  of  TELL  should 
be  handled.  For  sentences  of  L*  TELL  was  defined  as 

m  n  fw  |  I  ( a  *  w)  =  T)  . 

In  other  words,  we  ruled  out  those  elements  of  m  for  which  a  was 
false.  In  the  more  general  case*  we  will  do  the  same  thing  by 
ruling  out  worlds  where  a  is  false  but  with  respect  to  the  KB  i n 
quest i on .  For  example,  suppose  we  tell  a  KB  m  that  A  is  true  and 
that  for  some  w 

V  ( A  ,  w  *  i)  =  F. 

Thus,  w  describes  a  world  where  every  feacher  is  already  known  by 
m.  This  world  is*  therefore,  incompatible  with  the  assertion 
that  there  should  be  a  teacher  other  than  “those  known  by  m  •  TELL 
should  rule  out  such  worlds  by  keeping  only  those  where  there  is 
a  teacher  other  than  the  ones  known  by  m. 

This  leads  to  the  following  definition  of  TELL  that  subsumes 
the  previous  one  for  sentences  of  L. 

Defn  TELL  e  [KL  x  MD  -  MD  ]  is  defined  by 

TELL  ( a  *  m  )  =  m  n  [w  |  V(  a  ,  w  ,  m  )  =T]  . 

So,  TELL ( a  *  m )  will  keep  only  those  world  descriptions  in  m  where 
a  comes  out  true  understanding  any  reference  to  what  is  known  to 
be  a  reference  to  what  is  known  by  m  itself.  We  may  wish  to  have 
a  special  error  result  when  a  is  already  known  to  be  false,  that 
is,  when  TELL  has  the  empty  set  as  value. 
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There  is,  howeveri  a  more  serious  problem  with  this 
definition*  For  certain  model  descriptions  TELL  may  fail  to 
return  a  maximal  set*  The  class  of  model  descriptions  for  which 
this  happens  will  be  discussed  in  detail  in  section  four# 

A  major  consequence  of  this  definition  of  TELL  is  that  it 
assumes  any  assertion  will  be  a  statement  about  the  world  and  not 
the  KB#  If  the  assertion  talks  about  what  is  known  (using  K 
somewhere),  it  is  only  doing  so  to  help  make  the  statement  about 
the  world®  Thus *  there  is  no  way  to  tell  a  KB  about  itself  using 
TELL#  This  is  to  be  expected*  however*  since  a  KB  has  been 
assumed  to  have  complete  and  accurate  knowledge  of  itself  at  any 
given  time# 

This  point  is  evident  in  the  way  TELL  handles  pure 
sentences#  These  are  sentences  that  talk  only  about  a  KB  and* 

therefore,  cannot  carry  any  information  about  the  world#  Telling 

a  KB  that  a  pure  sentence  is  true  does  not  change  the  KB  at  all# 

Theorem  Every  pure  assertion  is  redundant  (or  contradictory) • 

Proof:  Suppose  a  is  pure  and  that  m  is  any  model  description# 

If  V  ( a:  *  ra )  is  T,  then  V(a*w*m)  is  T  for  every  w  and  so 
TELL(cr,m)  is  m#  If  V(a*m)  is  F*  then  V(a*w*m)  is  F  for 
every  w  and  so  TELL(a,m)  is  empty# 

So  we  can  finally  explain  why 

T  ELL  (  Kpv  Kq  *  ns ) 

does  not  result  in  a  KB  that  knows  p  or  that  knows  ql  the 

assertion  simply  does  not  say  anything  about  the  world#  If 

either  p  or  q  was  known,  the  assertion  is  redundant  and  has  no 
effect;  otherwise,  the  assertion  contradicts  what  is  already 
known#  The  only  way  to  move  from  a  KB  that  does  not  know  p  and 
does  not  know  q  to  one  that  knows  one  of  them  is  to  tell  the  KB 
enough  about  the  world  so  that  it  can  either  conclude  that  p  is 
true  or  that  q  is  true# 
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5.3  THE  UPDATE  AND  QUEfiY  THECEEMS 

In  this  section  I  will  investigate  ho 
and  ASK  behave  when  a  KB  is  treated  as  a 
of  L.  This  notion  of  a  concrete  KB  is,  in 
one  and  is  the  kind  dicussed  in  [Gallai 
section  is  divided  into  three  subsections, 
define  what  I  mean  by  a  concrete  KB  repre 
and  state  the  two  major  theorems  of  the  c 
subsection,  I  will  prove  the  two  theorems 
the  last  subsection,  I  will  consider  examp 
theorems  and  briefly  compare  my  appro 
[McCarthy  80]. 


w  the  functions  TELL 
finite  set  of  sentences 
fact,  the  more  common 
re  and  Minker  78].  The 
In  the  first,  I  will 
senting  an  abstract  one 
hapter.  In  the  next 
in  detail.  Finally,  in 
les  of  the  use  of  the 
ach  to  circumscription 


5.3.1  Definitions 

This  section  centers  on  the  idea  that  a  finite  collection  of 
symbols  can,  in  some  sense,  represent  an  abstract,  uncountable 
set  of  functions.  Specifically,  a  finite  set  of  sentences  of  L 
can  stand  for  a  model  description  in  such  a  way  that  the  TELL  and 
ASK  operations  can  be  understood  correctly  in  terms  of  operations 
on  these  sentences. 


If 

we  assume 

that  S  is  a 

set  of 

sente 

nces  of 

L  ,  the  first 

question 

is  what 

abstract  KB 

thi  s  se 

t  rep 

resents. 

If  we  want  to 

say  that 

S  stands 

for  a  model 

descri 

p  ±i  on 

M(  S)  , 

then  we  must 

first  of  all  insist  that  M(S)  knows  everything  in  S.  In  other 
words,  if 

S  —  [T ea c he r ( John ) , Teache r ( bi 11 )  } 
then  we  should  have  that 

V ( KTeach er ( John ) , M( S ) )  =  V ( KTeache r ( bi 11 ) , M ( S) )  =  T. 

In  addition,  we  should  expect  that 

V ( KT each er ( g eorge ) , M ( S ) )  =  F 

since  S  does  not  say  anything  about  George.  In  other  words,  M(S) 
should  not  only  know  what  is  in  S  but  should  knew  no  more.  As  it 
turns  out,  this  completely  determines  what  M(S)  should  be«  it  is 
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the  largest  model  description  that  knows  what  is  in  S* 

Defn  For  any  Sc  L ,  M(S)  =  (w  |  I(afw)=Tf  for  every  a  e  S)  • 

Clearly,  M(S)  is  a  model  description  for  any  first  order 
satisfiable  set  S*  The  fact  that  M(S)  is  the  largest  set  that 
knows  everything  in  S  can  be  seen  by  observing  that  if  we  add  any 
world  description  to  M(S),  the  resulting  model  description  does 
not  know  some  element  of  S*  So,  M(S)  only  knows  what  (follows 
from  what)  is  in  S* 

Given  that  S  represents  M(S),  the  question  that  I  will 
address  involves  what  can  be  said  about  TELL  and  ASK  on  M(S)«  In 
the  first  case*  I  will  obtain  a  result  showing  that  for  any  a  in 
KL 

TELLta, M(S)  )  =  M(S#  ) 

where  S'  is  an  updated  version  of  S*  In  the  second  case,  I  will 
be  able  to  show  that  for  any  a  in  KL 

ASK  ( at ,  M(  S)  )  =  yes  iff  S  It-  a 

where  II-  is  a  new  { non— mono  tonic )  provability  relation  over  KL* 

As  mentioned  in  the  introduction  to  this  chapter,  these 
results  can  be  viewed  in  two  ways*  First  of  all,  given  that  S 
represents  M(S) ,  they  tell  us  what  operations  on  sets  of 
sentences  correctly  represent  TELL  and  ASK*  In  other  words,  they 
tell  us  how  to  '* i mplement 11  TELL  and  ASK  on  this  particular 
representation  of  a  KB*  Secondly,  these  results  can  be  thought 
of  as  soundness  and  completeness  properties  for  TELL  and  ASK*  In 
fact,  they  relate  the  operations  on  sets  of  world  descriptions  to 
operations  on  finite  sets  of  sentences*  The  analogy  here  is 
between  validity  (defined  in  terms  of  sets  of  world  descriptions) 
and  provability  (defined  in  terms  of  finite  sets  of  sentences)* 

As  the  proof  of  the  two  theorems  is  somewhat  lengthy,  I  will 
first  of  all  make  the  necessary  definitions  and  state  the 
results • 

Assume  KB  is  a  fixed,  finite  subset  of  L* 

Defn  For  any  <x  e  L,  RESOLVE[a]  e  L  is  defined  recursively  by 
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RESOLVE! a  ]  = 

I  f  a  has  no  iree  variables 

then  A f  KB  h-  a  then  (x)(x=x)  else  -«(x)(x=x). 
else  /*  Assume  x  is  free  in  a  and  that  nl,...nk 

are  all  the  parameters  in  a  or  KB  */ 

( TERM  !x,nl,a]  v  ...  v  TEKM[x,nk,aJ  v  F INAL !  x  ,  a  ]  )  • 

TERM[ x  ,  n  ,  a  ]  =  (x  =  n  a  RESOLVE! a [ x/ n ]])  . 


FINAL!  x,  at  ]  —  /*  Assume  n  is  not  a  parameter  of  at  or  KB  ♦/ 

(x*nl  a  ...  a  x*nk  a  RESOLVE! a! x/n ] ] I n7x ] ) • 

Def n  For  any  a  e  KL,  /a/  €  Lis  defined  by 

/  a/  -  a  when  a  e  L»  /^q/  =  -»/a/f 

/(a=p)/  =  (/a/=>/p/)»  /  {  x )  a/  =  (x)/a/  and 

/ Ka/  =  RESOLVE! /a/ ] . 

flefn  For  any  ct  e  KL  y  KB  :h  a  iff  KB  H  /a/* 

The  two  theorems  I  will  be  proving  are 


Update  Theorem 

For  any  a  e 

KL, 

TELL (a, M( KB) ) 

=  M(KB  U 

!/ at/3  ) 

Query  Theorem 

For  any  a  e 

KL, 

ASK ( a ,M( KB) ) 

=  yes  iff 

kb 

The  Update  The o rera  states  that  the  r esul t  of  telling  a 
knowledge  base  represented  by  KB  that  a  is  true  can  be 
represented  by  adding  a  certain  first  order  sentence  /a/  to  KB. 
The  theorem  not  only  guarantees  that  the  result  of  a  TELL  is 
always  ( first  order)  representable,  but  also  stipulates  that  it 
is  representable  by  an  extension  of  the  existing  KB. 

The  Query  Theorem  states  that  the  knowledge  base  represented 
by  KB  knows  that  a  is  true  precisely  when  Jet /  follows  logically 
from  KB.  Note  that  the  non-recursive  enumerability  of  the 
"theorems”  of  Z H  is  apparent  in  the  fact  that  RESOLVE  is  not  a 
recursive  function*  However,  it  should  be  noted  that  RESOLVE, 
/a/  and  :  f—  are  defined  strictly  syntactically  in  terms  of  the 
finite  set  KB.  Moreover,  what  is  perhaps  more  surprising,  is 
that  these  are  defined  in  terns  of  first  order  provability  only. 
So  the  Query  Theorem  not  only  provides  a  proof  theoretic  view  of 
ASK,  but  a  first  order  proof  theoretic  view. 
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Note  that  the  two  theorems  only  apply  to  finite  KBs*  This 
restriction  will  be  discussed  in  the  final  section  of  the 
chapter*  For  now,  I  will  simply  prove  the  theorems* 


5*3*2  Proofs 


The  first  part  of  the  proof,  lemmas  1,  2  and  3,  show  that  a 
proper  renaming  of  the  parameters  in  a  formula  do  not  affect 
whether  or  not  the  formula  is  a  theorem* 

Let  F  e  [  N  -•  N  ]  bijective 
Def n  F  (  a)  —  a  with  n  replaced  by  F ( n ) * 

F(t)  =  t  with  n  replaced  by  F(n) 


Dein  F  *  (  <s  ,e>) 


<s '  , e  *  >  where 


s* (ai  =  s( F (a) ) 


and 


e  '  (  t ) 


F—  l(e(F(t)  ) 


which  is 
and  that 
k*  Then, 

which  is 


where  F-l  is  the  inverse  of  F* 

F'(m)  =  (F'(w)  |  w  e  m}  • 

Lemma  ^  For  any  t,  E(F(t),w)  =  F( E( t ,F * ( w ) ) ) • 

Proof:  by  induction  on  the  length  of  t* 

If  t  is  parameter,  then  E(Ftt),w)  is  F(t) 

F(E(t,F* (w) ) ) •  Suppose  t  is  f(tl,...tk) 

E(ti,F'(w))  is  ni ,  for  i  from  1  to 

E(f ( tl, . . *tk) , F* (w)  )  is  F* ( w) (f ( nlf *  * *nk) ) 

F-l (w<f (F(nl)  ,  .. *F(nk)  )  )  )  •  Thus,  F ( E (f ( 1 1 , . . . t k )  ,F •  ( w ) )  )  is 
w(f ( F(nl) , • *.F(nk) ) ) .  But  F(ni)  is  F( E ( ti ,F • ( w) ) )  which  is 
E(F(ti,w)j  by  induction*  So,  F (E ( f ( t 1 , • • • tk ) , F • ( w ) ) )  is 
E { f ( 1 1 ,  ••*,  tk)  »w)  • 

Lemma  2  V ( a , F * ( w) , F * ( m) )  =  V ( F ( a) , w, ra ) 

Proof:  by  induction  on  the  length  of  a* 

1*  Suppose  a  is  p(tl,***tk)*  Then  a  is  true  for  F'(w)  iff 
there  are  nl,  •••  nk  such  that  ti  has  as  value  ni  for  F* (w) 
and  p(nl,***nk)  is  true  for  F*(w)*  But  p(nl,***nk)  is  true 
for  F'(w)  iff  p ( F ( n 1 ) , • • • F ( nk) )  is  true  for  w*  Moreover,  by 
lemma  1,  F(nl)  is  the  value  of  F(t)  for  w*  Thus  p(tl,***tk) 
is  true  for  F ' ( w )  i f f  p(F(tl),***F(tk))  is  true  for  w* 

2*  Suppose  a  is  (tl  =  t2)  •  The  a  is  true  for  F'(w)  iff  tl 
and  t2  have  the  same  value  in  F* (w) •  But,  since  F  is 
bijective,  this  happens  iff  F ( E ( t 1 , F 1 ( w ) ) )  is 
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F ( E ( t2 f F*  ( w )  )  )  •  By  lemma  1,  this  happens  iff  F(tl)  and 
F(t2)  have  the  same  value  in  w#  So  (tl=t2)  is  true  in  F'(w) 
iff  ( F ( t 1 ) = F ( t 2 ) )  is  true  in  w# 

3#  The  lemma  clearly  holds  for  negations  and  material 
implication  s# 

4*  Consider  the  formula  (x)a#  This  is  true  for  F*(w)  and 
F'(ra)  iff  at£x/n]  is  true  for  every  n#  By  induction,  this 
holds  iff  for  every  n,  F(a£x/n])  is  true  for  w  and  m»  that 
ist  iff  for  every  n,  F(at)fx/F(n)  ]  is  true#  Since  F  is 
bijective,  this  happens  iff  for  every  n,  F(or)£x/n]  is  true 
for  w  and  m,  and  so  (x)F(at)  is  true# 

5#  Finally  consider  the  sentence  Ka  <  This  is  true  for 
F*(m)  iff  for  every  w  in  m,  a  is  true  for  F'(w)  and  F'(u)y 
i f f ,  by  induction,  Fla)  is  true  for  w  and  m,  iff  KF ( a )  is 
true  for  m# 

Lemma  3  Suppose  F  is  bijective  and  F(a)  =  a# 

For  any  parameters  nl ,  •••  nk 

H  at£nl,###nk]  iff  H  a[F(nl)  •  #,F(nk)  ] 

Proof:  need  only  show  only— if  part  since  F  is  bijective# 


Suppose  -»at£F(nl), 

•  •  .#  F  (  nk  )  ]  is 

consi st  en t • 

By 

t  he 

completeness  theorem,  there  is 

a  w 

amd  m 

such 

that 

a[F(nl) »••• ,F(nk) ] 

is  false# 

Since 

F  (a) 

is 

a  ♦ 

F ( a[ nl , • • • , nk ] )  is  false  for  w  and  m •  Therefore,  by  lemma 
2,  a[ nl  ,  •  •  •  ,  nk  ]  is  false  for  F*(w)  and  F*(m).  By  the 

soundness  theorem  -»at£  n  1  ,  •  •  •  ,  nk  ]  is  thus  consistent# 

Corollary  If  S  c  L  finite  and  for  each  p  e  S ,  Ftp)  =  p 

and  F  ( at )  =  at,  then 

S  l-  at£nl»###,  nk  ]  iff  S  l-  at£F(nl)»##»,F(nk)]# 

The  next  two  lemmas,  lemmas  4  and  5,  show  that  if  RESGLVE[  at] 
g  a  theorem  for  some  set  of  parameters,  then  either  a  TERM 
component  or  a  FINAL  component  of  the  formula  is  a  theorem. 

Lemma  4  Suppose  a  =  ac£  x  1  ,  .  .  #  ,  xk ,  x  ]  e  L  and  n  is  any  parameter 
of  either  at  or  SB#  For  any  nl,###,  nk 

if  I-  RESOLVE  £  a  ]£  nl  ,..#,  nk  ,  n  ]  then  I-  TERM£  x  ,  n  ,  a  3  £  nl  ,  •  •  •  nk  ,  n  ] 
Proof:  Show  the  other  disjuncts  of  RESOLVE  are  inconsistent. 

Assume  RESOLVE £  a ] £ n 1  ,  • •  • i nk , n  ]  is  a  theorem  and  pi  , • . • , pn 
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are  all  the  parameters  in  a  or  KB*  Since  n  appears  in  a  or 
KB»  for  some  i,  (x=pi)£nj  is  a  theorem*  Thus* 

i(x^plA,,,Ax^pn)[n]  is  a  theorem*  So,  -*F  INAL  £x  y  a  ]  £  nl  ,  •  •  •  nk  ] 
is  a  theorem*  Similarly,  for  any  J  distinct  from  i, 

-»(x=pj)[n]  is  a  theorem  and  so  -«TERM£  x,  p  J  ,  a  3  £  n  1  ,  •  •  •  ,  nk,  n  ]  is 
a  theorem*  So  the  only  disjunct  left  is 

TERM[  x,  n,ot]  [  nl  ,  •  •  ,  nk,n  ]  which  must,  therefore,  be  a  theorem* 

Lemma  5  Suppose  a  =  a£ xl , • • « , xk, x ]  e  L  and  n  is  not  a  parameter 
of  either  at  or  KB*  For  any  nl, «• *nk 

if  H  RESOLVEt  at  J  £  nl  ,  «  •  •  nk,  n  3  then  H  FINAL  [  x  ,  a  ]  £  nl  ,  •  •  •  ,  nk,  n  ]  . 
Proof:  Show  the  other  disjuncts  of  RESOLVE  are  inconsistent* 

Assume  RESOLVEt at ] [ nl ,*•• nk, n ]  is  a  theorem  and  nc  is  any 
parameter  appearing  in  either  a  or  KB*  The  sentence 
-t(x=n')[n]  is  a  theorem,  and  so  -»TERM  £x  ,  n  •  ,  a  J  [  n  1  ,  •  •  •  nk ,  n  ]  is 
as  well*  So  the  only  disjunct  left  is 

FINALE x , at  3 [ nl , • • • , nk ,n ]  which  must,  therefore,  be  a  theorem* 

The  next  lemma  is  the  main  one  for  the  Update  and  Query 
theorems*  It  guarantees  that  for  any  choice  of  parameters  for 
any  first  order  formula,  the  resulting  sentence  follows  from  the 
KB  precisely  when  the  value  of  RESOLVE  is  a  theorem* 

Lemma  6  Suppose  KB  is  finite  and  a  =  a[xl ,• • *xk]  e  L* 

For  any  nl  ,  •  **nk,  KB  I-  at£  n  1 ,  «  •  •  ,  nk  ]  iff 
RESOLVEt  at  ][  nl  ,*••  nk  ]  is  a  theorem* 

Proof:  by  induction  on  the  number  of  free  variables  in  at* 

If  at  has  no  free  variables,  then  if  at  follows  from  KB, 
RESOLVEfat]  is  a  theorem;  if  a  does  not  follow  from  KB,  then 

RESOLVEtat]  is  inconsistent*  Assume  by  induction  that  the 

lemma  holds  for  formulas  with  k  free  variables  and  suppose  a 
is  at  C  xl  ,  •  •  •  ,xk  ,x  ]  •  Let  nl,***,nk  be  any  parameters*  There 
are  two  cases  for  the  (k+l)th  parameter,  n* 

Case  1:  n  appears  in  a  or  KB* 

KB  I-  atC  n  1  ,  •  •  •  ,  nk  ,  n  ]  iff 

KB  t-  at  t  x/n  J  £  nl  ,*•  *nk  ]  iff  (by  induction) 

H  RESOLVEt  a  £  x/ n]J[nl,*** nk ]  iff 
H  (x=n  a  RESOLVE £ a£ x/n ]])£ nl ,*•• nk ,n ]  iff 
h-  TERMf  x  ,  n  ,  a  ]  £  nl  ,  •  •  •  nk  ,  n  ] 


iff  (by  lemma  4) 
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•”  RESOLVE!  a  ][nl»  •  •  •  nk  » n  ]  • 

Case  2 1  n  does  not  appear  in  a  or  KB  • 

Suppose  p  1  y  •  «  •  y  pn  are  all  the  parameters  appearing  in  at 
°r  KB»  Assume  n*  is  the  parameter  used  by  the  function 
FINAL  and  define  F  to  be  the  bijection  which  maps  n  to 
n',  n*  to  n  and  all  other  parameters  to  themselves* 

KB  H  a [ n  1  *  •  • • nk t n ]  iff  (by  iemma  3) 

KB  »-  a[  F  (  nl  )  y  •  .  •  y  F  (  nk)  y  n  *  ]  iff 

KB  H  at  [x/n*  ]  (  F  (  n  1  )  y  •  •  •  y  F(  nk  )  ]  iff  (by  induction) 

H  RESOLVE  [  a  C  x/  n  *  ]]{F(nl)  y  .  « • y  F ( nk)  ]  iff 
H  (x^pl  a  •••  A  X^pn  A 

RESOLVEt  Q£  C  x/n 1  ]  ])[F(nl)  ,..*F(nk)  ,n'  ]  iff 
H  F INAL[ x ]  £F ( n 1 )  y • • • y F(  nk)  y n 1 ]  iff  (by  lemma  J) 

*-  F  INAL[  x  y  a  ]  [  nl  y  •  •  •  y  nk  y  n  ]  iff  (by  lemma  5) 

H  RE SOLVE I a  ]  [ n 1 y • • • y nk y n ] • 

Lemma  7  translates  the  statement  of  lemma  6  into  semantic 
terms  using  the  Soundness  and  Completeness  theorems* 

Lemma  7  Suppose  a  =  at C  xi  y  •  •  •  y  xk  ]  €  L. 

For  any  parameters  nly#**fnky  and  for  any  finite  KBt 
V  (  (  Kat  =  RESCLVEfa  ])  [  nl  ,  *  .  .  nk  ]  ,  M(  KB  )  )  =  T. 

Proof!  Let  p  be  a[nly.«.nk]  and  u  be  RESOLVE [ a  ][ nl y ••  .nk ] • 

If  Kp  is  true  for  M( KB) y  then  any  world  satifying  KB  also 
satisfies  p.  By  the  completeness  theoremy  KB  with  ~»p  is 
thus  inconsistent.  So  by  lemma  6y  u  is  a  theorem  andy  by 
the  soundness  theoremy  true  for  M(KB) •  Converselyy  if  Kp  is 
not  true  for  M(KB) ,  then  KB  with  p  is  satisfiable  and  thus 
consistent.  So  by  lemma  6y  againy  u/  is  not  a  theorem. 
Howevery  u  contains  no  functiony  predicate  or  K  symbols  so 
is  either  valid  or  uasatisfiable.  Since  it  is  not  a 
theoremy  it  must  be  unsatisfiable,  in  which  case,  it  is 
false  for  M ( KB  )  • 

Finallyy  lemma  8  generalizes  lemma  7  so  that  the  formula  in 
quest i on  need  not  be  first  order.  In  this  case,  the  / •/  function 
is  used  instead  of  RESOLVE. 

Lemma  8  For  any  a[xlt...xk]  €  KL ,  any  w  e  WD  and  any  nl,...,nk, 
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V  (<x[  nl  y  .  •  •  ,  nk  ]  ,  w, M(  KB  )  )  —  I ( / a/ [ n 1 y * • * y nk ] f w ) * 

Proof:  by  induction  on  the  length  of  a • 

If  a  is  formula  of  Ly  then  /a/  is  a  and  the  lemma  holds* 
The  lemma  also  holds  for  negations  and  material  implications 
and  universal,  generalization  by  induction*  Consider  the 
formula  Ka [ xl » • • • xk ] •  This  is  true  of  n 1 y  * • «  y  nk  for  M(KB) 
iff  a£ n 1 y • • • y nk ]  is  true  for  each  w  in  M(KS)«  By  induction, 
this  holds  iff  /a/ [ n 1  ,  • • • nk ]  is  true  for  each  w  and  so 
K/a/ [ nl y • • •  y nk  ]  is  true  for  M { KB ) *  Since  /a/  is  formula  of 
Ly  by  lemma  7,  this  holds  iff  RESGL VE [ /a/ 3 [ nl y *  * • y nk ]  is 
true  iff  /Kat/ [  n  1 ,  •  «  •  ,  nk  ]  is  true® 

The  two  theorems  follow  directly  from  lemma  8® 


Update  Theorem  TELL( a , M( KB ))  =  M{ KB  U  (/a/)). 

Proof:  TELL  (at  ,M(  KB )  ) 

=  M ( KB )  n  Cw  |  V(a,w,M( KB ) )  =  T} 

=  M(KB)  n  (w  1  I(/a/,w)  =  T}  by  lemma  8 

=  Cw  |  for  every  p  in  KB  U  C/oj/3  ,  I(  p, w)  =  T} 


=  M ( KB  U  (/«/) ) . 


Query  Theorem  ASS  (ayM(  KB)  )  =  yes  iff  KB  : I-  a. 

Proof:  ASK (a , M(KE) )  =  yes  iff 

for  every  w  in  M(KB) ,  V(ayW,M(KB) )  =  T  iffy  by  lemma  8y 
for  every  w  in  M(KB)t  I(/a/yw)  =  T  iff 
KB  I-  /a/  since  /a/  is  a  sentence  of  L* 

This  completes  the  proof  of  the  two  main  theorems® 


5.3*3  Remarks 

The  proof  of  the  two  theorems  depends  critically  on  the  fact 
that  for  any  first  order  formula  a  there  is  another,  RESOLVEla ] , 
such  that 

Ka[ n 1 , • • • y nk j  is  true  iff  RESOLVE [ a ][ n 1 nk J  is  true. 

To  show  RESOLVE  in  operation,  I  will  reconsider  the  example  KB 
introduced  in  section  one®  Actually,  RESOLVE,  as  defined,  tends 
to  produce  a  very  long  formula  (using  every  parameter  appearing 
in  the  KB)  so,  for  purposes  of  exposition,  I  will  use  a  shorter 
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logically  equivalent  formula*  To  recap,  the  example  KB  is 
Example  KB 

Teach( john , raary )  Teach! i eor g  e , sue) 

[ Teach! J ohn , sue )  v  Te ach ( bi 11 , sue )  ] 

( Ex ) Teach ( x , Joan ) 

(x) [ Teach(x,ann)  =  x=bill ] 

(x)  (y)  [Teach(x,y)  =>  y=mary  v  y=Sue  v  y=Joan  v  y=ann] 

For  this  KB,  the  formula 
Teach! x, sue ) 
resolves  to 

( x  =  george ) 

since  George  is  the  only  person  known  to  teach  Sue  (even  though 
it  is  known  that  she  has  another  teacher) •  So  we  have,  for 
example,  that 

/  (  Ex  )  (  Te  ach  (  x  ,  sue  )  a  -»KTeac  h  (  x  ,  sue  )  ]  /  = 

(Ex) [ Teach ( x , sue )  a  (x^george)  J* 

In  other  words,  the  sentence  that  says  that  (or  asks  whether)  Sue 
has  a  teacher  other  than  the  her  known  teachers  really  says  that 
(asks  whether)  she  has  a  teacher  other  than  George.  On  the  other 
hand,  the  formula 

T eac  h  (  x ,  j  oa  n  ) 

resolves  to 

-» ( X  )  (  X—  X  ) 

which  is  always  false,  since  Joan  has  no  known  teachers*  In  this 
case,  we  have  that 

/( Ex )[ Teach ( x , J oan)  a  ^KTeach ( x , jo an) ] /  = 

( Ex ) [Teach(x,joan) ] • 

In  other  words,  asking  the  KB  if  Joan  has  any  teachers  apart  from 
the  known  ones  is  really  just  asking  if  Joan  has  any  teachers  at 
all*  The  formula  with  two  free  variables 


Teac  h ( x , y ) 
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resolves  to 

t  (x=john  a  y=mary)  v 
(x=george  a  y=sue)  v 
(x=ann  a  y=bill)  ] 

which  lists  all  the  known  teach  relationships*  So*  in  this  case, 
we  have  that 

/( Ex )£ Teach (x, y )  a  ^KTeach { x» y ) ]/  — 

(Ex) [Teach(x»yJ  a  (x^john  v  y^mary]  a 
(x^george  v  y^sue)  a 
(x^ann  v  y*bill)]« 

This  formula  says  of  y  that  somebody  teaches  her  anti?  moreover* 
if  y  is  Mary  then  the  somebody  is  not  John*  if  y  is  Sue  then  the 
somebody  is  not  George  and  if  y  is  Ann  then  the  somebody  is  not 
Bill*  We  can  now  ask  what  this  formula  resolves  to*  and  the 
answer  is 

( y=  sue  w  y= joan) 

since  Sue  and  Joan  are  the  only  students  who  are  known  to  have  a 
teacher  apart  from  their  known  teachers*  This  means  that,  for 
example, 

/ ( Ey ) [ Gr adStudent ( y )  a 

K(Exi)[Teach(x,y)  a  -«KTeach  (  x,  y  )  ]  ]  /  = 

( Ey ) [ GradStuden t ( y )  a  (y=sue  v  y=joan)]  = 

GradS tudent ( sue )  v  GradStudent ( Joan ) • 

So  the  assertion  that  there  is  a  graduaie  student  among  the 
students  for  which  teachers  are  known  to  be  missing  simply  says 
that  either  Sue  or  Joan  is  a  graduate  student* 

The  fact  that  there  are  only  a  finite  number  of  known 
students  in  the  above  example  should  not  be  taken  as  implying 
that  only  these  can  be  handled*  For  example,  we  could  have  a  KB 
that  contains  only 

(x)(y)[x=y  3  p ( x , y ) ] 

in  which  case,  there  are  an  infinite  number  of  known  p 
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relationships*  Here  we  have  p  (x,y)  resolving  .to  ( x=y )  , 

mention! ng  no  parameters  at  all#  To  see  how  this  occurs » 
consider  a  KB  which  mentions  only  a  single  parameter  n,  distinct 
from  nlj  n2  and  n3 «  In  this  case j  RESOLVE [ p ( x , y )  3  is  the  formula 

( x= n  a  RESOLVE! p(n,y) ])  v 

(x*n  a  RESOLVE£p( nl,y)  ][nl/x]  )  . 

The  formula  for  RES CLVE [ p ( n t y ) 3  here  is 

( y— n  a  RESOLVE! p( n, nj 3 )  v 

(y*n  a  RESOLVE! p{ n,n2) 3fn2/y 3 . 

The  formula  for  RESOLVE ! p ( nl , y ) 3  is 

(y=n  a  RESOLVE!  p{  nl  ,n)  3)  v 

{ y=n 1  a  RESOLVE! p( nl , nl ) 3 )  v 

(y*n  a  y*nl  a  RESOL VE£  p  (  n  1  ,  n3  )][  n3/ y  ])  . 


Now  RESOLVE! p( n, n) 3  is  a  theorem  and  RESOLVE [p(ni,nj) 3  is 
inconsistent#  This  means  that  RESOLVE! p (n , y)  3  is  equivalent  to 
( y=n )  •  Si mi lari y  ,  RESOLVE!  p  (  n  1 ,  y  )  3  is  equivalent  to  ( y=nl )  •  So, 
the  formula  RESOLVE  £ p ( x t y )  3  is  equivalent  to 

(x=n  a  y  =  n  3  v  C  x*n  a  y=x 3 


which  is  equivalent  to  (x=y) • 

i 

There  is  an  interesting  correspondence  between  RESOLVE  and 
the  circumscription  mechanism  of  McCarthy  [McCarthy  803*  The 
parallel  is  that  while  circumscription  is  a  formal  method  for 
conjecturing  that  the  only  entities  satisfying  a  predicate  are 
those  that  must  satisfy  it,  RESOLVE  is  a  way  of  getting  hold  of 
the  entities  that  are  known  to  satisfy  a  formula#  If  we  let  nph-n 
be  the  provability  relation  when  the  predicate  p  is 
circumscribed,  we  get,  for  example, 


[p  (  n  1 )  ,  p  (  n2  )  3  P*~  (x)[p(x)  =  (x=nl  v  x=n2)3* 

In  other  words,  if  nl  and  n2  are  p*s,  then  if  the  only  p's  are 
those  that  must  exist,  then  nl  and  n2  are  the  only  p's#  In  my 
case,  I  have  a  similar  property  which  is  that 


[p ( n  1  )  , p ( n2 ) 3  IH  ( x ) [ Kp ( x )  =  (x=nl  v  x  =  n2)3« 
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This  says  that  if  nl  and  n2  are  p'sf  then  if  nothing  else  is 
knownt  nl  and  n2  are  the  only  known  p's*  Note  that  unlike 
circumscription  there  is  no  conjecture  here;  -there  may  very  well 
be  many  more  p'  s  but,  currently,  nl  and  n2  are  the  only  known 
ones*  However,  we  could  get  the  same  result  as  circumscription 
by  conjecturing  that  every  p  is  known,  that:  is,  by  adding  the  CWA 
for  p*  In  this  case,  the  p's  would  be  identified  with  the  known 
p® s  and  so  the  KB  would  believe  that  nl  and  n2  are  the  only  p's, 
as  with  circumscription* 

This  is  not  to  say  that  there  is  an  exact  formal 
correspondence  between  circumscription  and  RESOLVE*  If  anything, 
circumscription  is  much  more  powerful*  For  example,  we  have  that 

(Ex)p(x)  pt-  (ExJ(y)[p  (y)  =  (y=x)] 

which  says  that  if  something  is  p,  then  if  there  are  no  more  p's 
than  need  be,  there  is  only  one  p*  On  the  other  hand,  it  is  not 
the  case  that 


(Ex)p(x)  :h  (ExHy)CKp(y)  =  ( y=x )  ] 

since  even  if  it  is  known  that  there  is  a  p,  there  need  not  be  a 
known  p*  In  fact,  adding  the  CWA  in  this  case  would  result  in  an 
inconsistency  since  the  KB  knows  it  is  missing  a  p*  Obviously, 
circumscription  does  not  require  there  to  be  any  known  p's  to 
conclude  that  there  is  exactly  one*  So,  while  there  are 
connections  between  the  two  concepts,  the  motivation  and  the 
formal  behaviour  of  the  two  are  quite  distinct*  In  fact,  it 
seems  plausible  that  neither  formal  system  is  able  to  simulate 
the  other  except  in  very  restricted  circumstances* 


5.4  LIMITATIONS 

One  thing  to  consider  regarding  the  TELL  and  ASK  operations 
is  that  while  they  allow  us  to  use  all  of  KL  to  interact  with  a 
KB,  the  Update  and  Query  Theorems  guarantee  that  these  operations 
can  be  understood  in  first  order  proof  theoretic  terms*  The 
hidden  cost  here  is  twofold*  First  of  all,  RESOLVE  is  not  a 
partial  recursive  function  so  in  dropping  to  first  order  terms, 
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we  have  also  given  up  effectiveness*  Some  sort  of  heuristic 
component  is  required  to  deal  with  the  general  case  of  TELL  and 
ASK*  There  iS|  moreover*  another  serious  restriction  imposed  by 
the  syntactic  definitions  of  TELL  and  ASK:  they  apply  only  to 

abstract  KB  * s  that  can  be  represented  by  a  finite  set  of  first 
order  sentences*  Although  this  is  normally  what  is  meant  in 
referring  to  a  first  order  KB*  it  is  nonetheless  worth  examining 
the  properties  of  the  model  descriptions  left  behind* 

For  our  purposes*  we  might  define  representable  KBs  as 

follows: 

Def n  Let  ra  e  MD •  m  is  representable  iff  there  is  a  finite  S  c  L 
such  that  m  =  M(S)* 

So  the  Update  and  Query  Theorems  apply  only  to  model  descriptions 
that  are  representable  in  this  sense*  One  thing  to  notice  is 

that*  as  a  simple  corollary  to  the  Update  Theorem,  TELL  always 

results  in  a  maximal  set  when  the  model  description  is 

represen t  abl e • 

While  every  representable  set  is  maximal,  the  converse  is 
not  true*  The  simplest  way  to  see  this  is  to  consider  a  KB  that 
uses  an  infinite  supply  of  parameters  in  a  non— trivial  way* 

Let  nl,  n2,  •••  be  any  ordering  of  the  parameters* 

Let  ODD  =  (nl*  n3 *  n5 »  •••}• 

Let  KBo  =  (p(nl ) *  p(n3)»  p( n5 ) »  • • • ) • 

The  model  description  M(KB°)  is  maximal  but  not  representable* 
KBo  knows  more  about  the  world  than  could  be  acquired  in  a  finite 
number  of  TELL  operations* 

Even  though  M(KBo)  is  not  representable,  it  might  be  argued 
that  TELL  and  ASK  should  be  able  to  deal  with  it.  Indeed,  ASK 
does  work  properly  with  this  set  and  TELL  does  too  when  the 
assertion  is  an  element  of  L*  But  consider  the  sentence 

u  =  ( Ex) ( q ( x ) AKp ( x) 3 

The  trouble  here  is  that  the  set 

m*  =  TELL  (u/*M(KBo)) 
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is  not  maximal*  It  is  the  set  of  all  worlds  where  every  ODD 
parameter  is  a  p  and  at  least  one  is  a  q»  The  obvious  way  to 
produce  a  maximal  set  here  is  to  use 

Max ( ra* ) 

but  this  does  not  work  since  although  it  agrees  with  m*  on  all 
sentences  of  L  ,  it  disagree  with  m*  on  «  Specif  icallyt  ra*  knows 
v  is  true  but  Max(m*)  does  not*  Even  though  they  are  (by  my 
definition)  equivalent,  one  knows  that  thgre  is  an  ODD  q  and  the 
other  does  not* 

This  suggests  that  my  restriction  to  maximal  sets  was 
perhaps  too  hasty*  If  m*  and  Max(m*}  know  different  things  about 
the  world,  maybe  m*  should  be  a  distinct  model  description  where 
we  are  now  allowing  world  knowledge  to  be  expressed  using  all  of 
KL  (to  allow  for  u )  •  For  example,  we  might  say  that  m*  is 
represented  by  KBo  and  u  with  no  attempt  to  resolve  this  sentence 
into  KL  (since  it  is  impossible  anyway)* 

Unfortunately,  this  proposal  has  a  very  serious  defect:  the 
knowledge  about  the  ODD  q  will  not  be  representable  once  the  set 
of  known  p's  changes*  Consider,  for  example,  the  result  of 

TELL (  (x)p(x) ,  m* ) • 

This  KB  has  nothing  of  the  form 

( Ex) [ q ( x )  a  •••] 

that  it  can  use  to  represent  the  existence  of  an  ODD  q*  So 
without  drastically  revising  the  language  (by  either  allowing  for 
infinite  disjunctions  of  q* s  or  time— stamped  known  p's),  m*  and 
thus  M(KBo)  will  have  to  be  disallowed* 

So  it  looks  like  we  are  committed,  in  terms  of  ASK  and  TELL, 
to  representable  sets*  The  Maximal  Set  Theorem  says  that  any 
satisfiable  sentence  is  satisfiable  by  a  maximal  set.  It  would 
be  nice  to  have  a  theorem  saying  that  any  satisfiable  sentence 
was  satisfiable  by  a  representabl e  set*  This  would  convince  us 
that  the  logic  was  about  the  right  kind  of  KBs* 
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Consider,  however,  the  conjunction  of  the  following: 
(x)^L(x,x) 

(x)  (y)(z)[L(x,y)AL(y,z)  =>  L(x,z)] 

Kp(nl)  a  K-ip(n2) 

( x ) [ Kp( x )  3  ( Ey ) L ( x , y ) AKp ( y ) ] 

(  x )  t  K-* p  (  x  )  3  (  Ey  )  L  (  x,  y  )  AK-»p  (  y  )  ]  • 

This  sentence  is  satisfiahle  by  a  model  description  represented 
by 

p(nl),  p ( n  3  )  ,  p ( n  5 )  ,  ••• 

-™p(n2),  -ip(n4),  ip(n6)  ••• 

for  a  suitable  choice  of  world  description*  However,  no 

(finitely)  representable  model  description  satisfies  It.  So  Just 
because  a  sentence  is  true  in  all  representable  sets,  it  need  not 
be  true  for  all  maximal  sets  and,  therefore,  a  theorem. 

So  it  looks  like  we  are  committed,  in  terms  of  the  logic  of 

KL  ,  to  maximal  sets.  It  is  highly  unlikely,  moreover,  that  a 

simple  revision  of  KL  could  restrict  model  descriptions  to  be 
representable.  It  would  have  to  allow  for  arbitrarily  large 
representations  without  also  allowing  infinite  ones. 

What  we  have  arrived  at  is  the  following:  we  have  to  allow 

for  non— represen  tab le  maximal  sets  but  we  have  to  understand  them 
in  such  a  way  that  it  does  not  make  sense  to  TELL  them  anything. 
One  account  of  these  sets  that  does  the  trick  is  to  understand 

them  as  limiting  cases  of  representable  sets: 

Let  a ( 1 ) ,  m ( 2 ) ,  ...  be  a  sequence  of  elements  of  MD • 

Defn  The  1 irai t  of  the  sequence  ism  iff 

1.  m ( k+ 1 )  £  ra(k)  for  every  k  (monotone  decreasing) 

2.  o  £  m(k)  for  every  k  (m  is  a  lower  bound) 

3.  If  m'  £  m(k)  for  every  k,  then  m*  £  m  (m  is  the  g.l.b) 

It  should  be  clear  that  any  model  description  is  the  limit  of  a 
sequence  of  representable  ones.  In  particular,  M(KBo)  is  the 
limit  of  the  sequence 

m ( 0 )  =  WD  and  m(k+l)  =  TELL ( p ( n2k+ 1 ) , m ( k ) ) . 
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This  explains  why  non— representable  sets  cannot  be  told  anything: 
the  only  way  you  can  get  to  one  is  as  a  limit  of  an  infinite 
number  of  TELL  operations* 

The  obvious  analogy  here  is  the  real  and  rational  numbers* 
There  are  only  countably  many  representable  sets  (rational 
numbers)  which*  nonetheless*  can  be  used  to  approximate  to  within 
any  degree  of  precision  the  maximal  sets  (real  numbers)  even 
though  there  are  uncountably  many  of  these  • 

In  terms  of  the  logic  of  KL*  the  Maximal  Set  Theorem  says  ' 
that  we  do  not  have  to  consider  all  sets  of  world  descriptions 
( equi numerous  with  the  power  set  of  the  power  set  of  the 
integers)  but  only  the  maximal  ones  ( equi numerous  with  the  power 
set  of  the  integers)  all  of  which  are  limiting  cases  of  the 
representable  ones  ( equinumerous  with  the  integers)*  Viewed  in 
terms  of  lattices,  the  logic  prescribes  not  only  a  lattice  of 
model  descriptions  (the  representable  ones)  but  a  complete 
lattice  (including  the  limit  points)*  So  while  it  would  be  nice 
to  have  KL  only  characterize  representable  KBs*  the 

generalization  it  allows  is  at  least  theoretically  respectable* 
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CHAPTER  6 

DEFAULTS  AND  PROTOTYPES 


6*1  Introduction 

6*2  The  Definitional  Level 

6*2*1  Essential  and  Default:  Properties 
6*2*2  The  Representation  of  Defaults 
6.2.3  Prototypes 

6*3  The  Inheritance  of  Default  Properties 
6*3*1  The  Application  of  Defaults 
6*3*2  Interactions  among  Defaults 
6*3*3  Ordering  Default  Alternatives 
6*4  Limitations  and  Extensions 


The  goal  of  this  chapter  is  to  suggest  a  possible  bridge 
between  my  work  and  some  of  the  more  traditional  approaches  to 
Knowledge  Representation*  The  main  point  is  that  the  "logical” 
stance  I  have  taken  need  not  be  viewed  as  a  competition  to  the 
"non— logi  cal’*  treatment  offered  in  object— centered 
representations  (such  as  KL-ONE  [ Brachman  76] ,  PSN  [Levesque  and 
Mylopoulos  79],  NETL  [Fahlman  79]  or  KRL.  [ Bobrow  and  Winograd 
77]) •  As  I  will  argue  in  the  next  section,  the  issues  these 
languages  address  can  profitably  be  viewed  as  orthogonal  and 
complementary  to  the  ones  I  have  faced*  I  maintain  that  there  is 
a  possible  unification  of  the  two  approaches  that  preserves  the 
distinct  advantages  of  each  by  completely  separating  their 
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concerns • 

This  is  not  to  say  that  the  unification  I  am  suggesting  will 
be  acceptable  to  either  the  "logical"  or  "non- logical"  schools# 
For  some  ,  a  formal  logical  language  has  no  place  in  Knowledge 
Representation  (e#g#  [Minsky  74])#  For  others,  a  unification 
simply  means  the  encoding  of  logical  sentences  within  an 
objec t— c ent er ed  scheme  (e#g#  [Schubert  763,  [Shapiro  793  and 
[Hendrix  75])#  My  approach  is  quite  different  and  is  based  on 
the  assumption  that  there  is  more  worth  preserving  in 
object— centered  schemes  than  an  indexing  strategy  for  logical 
sentences • 

In  the  first  section,  I  will  argue  for  the  separation  of  a 
KB  into  two  distinct  components:  an  assertional  and  a 

definitional  one#  In  the  second  section,  I  consider  the 
definitional  component  of  a  KB  especially  as  it  relates  to 
defaults  and  prototypes#  The  third  section  deals  with  the 
inheritance  of  default  properties  and  what  can  be  done  when  more 
than  one  default  is  inheritable#  One  of  the  features  of  the 
approach  is  that  like  traditional  semantic  networks,  it  is 
possible  to  specify  the  order  in  which  defaults  are  to  be  used# 
Finally,  in  section  four,  I  discuss  some  of  the  limitations  of  my 
approach  and  propose  an  extension  that  could  be  useful  for 
recognition  purposes# 

While  this  chapter  attempts  to  link  the  "logical”  and 
"non— logi cal”  perspectives,  only  a  first  step  towards  a 
unification  can  be  dealt  with  here#  Moreover,  this  step  must  be 
understood  as  preliminary  and  in  need  of  much  further  research# 
My  only  intent  is  to  demonstrate  that  traditional  Knowledge 
Representation  can  be  approached  from  my  perspective  without 
overly  distorting  either  the  issues  or  my  framework# 

6.1  INTRODUCTION 

Suppose  we  are  interested  in  using  a  predicate  "FlyingBird"  . 
We  would  certainly  want  any  KB  using  this  predicate  to  know  that 

(1)  (x) [ FlyingBird(x)  =  B ird( x ) aFI y ( x ) ] • 
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If  we  are  interested  in  modelling  a  world  where  the  only  birds 
that  do  not  fly  are  penguins,  we  want  the  KB  to  know  that 

(2)  (x)  [  FlyingBird(x)  =  Bird  (  x  )  a-*P  engui  n  (  x  )  ]  • 

The  import  of  (2),  however,  is  quite  different  from  that  of  (1) 
even  though  the  KB  should  know  that  both  of  them  are  true* 
Specifically,  because  (2)  need  not  be  true  in  a  different  world 
(e*g*  one  containing  ostriches),  its  truth  conveys  information 
about  the  world,  that  is,  that  penguins  are  the  only  non— flying 
birds  in  that  world*  The  intent  of  ( 1) ,  on  the  other  hand,  is 
that  it  cannot  fall  to  be  true  and,  so,  conveys  no  information 
about  the  world*  If  these  two  sentences  are  to  co— exist  in  a  KB, 
they  must  be  distinguished  somehow* 

An  important  characteristic  of  both  ( 1)  and  (2)  is  that  the 
predicate  MF ly ingBird"  can,  in  some  sense,  be  eliminated: 

(1*)  ( x ) [ B ird ( x ) AFly ( x)  =  Bi r d ( x ) aFI y ( x ) ] , 

(2*)  (  x  )  [  Bird(  x  )  AFly  (x  )  =  Bi  rd{  x  )  A-.Penguin(  x)  J  • 

Once  again,  (2*)  but  not  (l1)  says  something  about  the  world* 

Moreover,  (2* )  appears  to  say  the  same  thing  about  the  world  that 

(2)  was  intended  to*  If  this  is  true  for  (1*)  as  well,  then  (1) 
is  not  really  asserting  anything  at  all* 

My  claim  here  is  that  (1)  is  best  understood  not  as  an 

assertion  (about  some  world)  but  as  an  addition  of  terminology  to 
talk  about  a  world.  In  other  words,  the  intent  (1)  is  best 
captured  by  something  like 

(3)  FlyingEird  —  Ax • [ Bi rd ( x) aFI y ( x ) ] 

which  defines  a  predicate  in  terms  of  two  others.  The  question 
as  to  whether  (3)  is  true  or  false  simply  does  not  arise  since 

(3)  is  not  the  kind  of  linguistic  expression  that  can  take  a 

truth  value.  If  we  insist  on  talking  about  the  truth  value  of 
(1),  we  can  take  the  position  that  it  is  true  precisely  the  same 
way  ( 1 • )  is  -  vacuously,  by  virtue  of  the  way  the  language  is 

intended  to  be  used*  Following  a  distinction  made  in  [ woods  75], 

I  will  call  statements  like  (1),  that  introduce  terminology, 
definitional  and  statements  like  (i),  that  convey  information 
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about  a  world*  assertional. 

The  reason  for  having  assertional  expressions  in  a 
representation  language  is  simply  that  without  them  you  cannot 
say  anything  about  the  world.  Absolutely  no  information  is 
transmitted  by  a  definitional  expression.  It  would  be  as  if 
someone  were  trying  to  tell  you  soaething  but  was  only  making 
statements  of  the  form 


By  an  a*  I  mean  ... 

for  various  terms  a.  Despite  all  the  terminology  introduced* 
nothing  has  been  said. 

The  reason  for  definitional  expressions  is  different:  they 

facilitate  the  interaction  between  the  user  (man  or  machine)  and 
the  KB.  The  addition  of  terminology  is  not  a  matter  of  truth  or 
falsity  but  specifies  the  components  in  terms  of  which  true  and 
false  statements  can  be  made.  In  other  words*  definitional 
expressions  help  structure  what  will  eventually  be  said  or  asked 
about  a  world. 


The  traditional  concern  of  "logical"  languages  is  in 
providing  adequate  assertional  facilities  of  various  kinds. 
These  are  nicely  summarized  in  a  passage  from  [Moore  80*  p. 
137]  : 


Any  system  adequate  for  representing  the  knowledge  of 
an  intelligent  being  must  surely  be  able  to: 


1.  Say  that  something  has  a  certain  property  without 
saying  what  thing  has  that  property. 

2.  Say  that  everything  in  a  certain  class  has  a 
certain  property  without  saying  what  everything  in 
that  class  is. 

3.  Say  that  at  least  one  of  two  statements  is  true 
without  saying  which  statement  is  true. 

4.  Explicitly  say  that  something  is  false. 

5.  Either  settle  or  leave  open  to  doubt  whether  two 
non-identical  expressions  name  the  same  object. 
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The  crucial  point  here  is  that  every  single  one  of  these 
requirements  can  be  understood  as  allowances  for  certain  kinds  of 
incompleteness*  In  other  word  s  *  the  reason  for  wanting  the 
expressive  power  of  first  order  logic  (and  KL *  for  that  matter) 
is  not  to  be  able  to  represent  detailed  knowledge  of  a  complex 
domain*  It  is  to  be  able  to  represent  very  shallow  and 
incomplete  knowledge  of  the  domain*  It  is  quite  important  to 
realize  that  the  choice  here  is  not  so  much  between  a  "logical" 
or  "non-logical"  representation*  but  more  a  decision  about  what 
kinds  of  incompleteness  will  be  tolerated* 

The  "non— lo gica 1"  languages*  on  the  other  hand*  while  weak 
at  the  assertional  level*  have  specialized  in  the  study  of  the 
definitional  level*  The  major  concern  of  these  languages  has 
been  in  providing  an  adequate  set  of  facilities  for  organizing 
and  structuring  the  set  of  terms  (predicates,  types,  classes* 
concepts,  frames,  units  •••)  being  used*  A  partial  list  of 
requirements  analogous  to  the  one  above  might  be  considered: 


Any  system  adequate  for  representing  the  knowledge  of 
an  intelligent  being  must  surely  be  able  to 


1*  specialize  or  generalize  existing  concepts  in 

various  ways* 

2*  aggregate  existing  concepts  into  a  single 

structured  whole* 


3*  delineate  the  roles  played  by  the  components  of  a 
structured  concept* 

4*  differentiate  between  the  essential  and  merely 
prototypical  features  of  a  concept* 


For  example,  the  ubiquitous  IS-A  hierarchy  is  best  viewed  as  a 
mechanism  for  introducing  new  terms  by  specializing  or 
generalizing  existing  ones  rather  than  a  facility  for  asserting 
restricted  universal  generalizations* 

The  purpose  of  the  definitional  level  should  not  be  to 
supplant  or  extend  the  assertional  features  of  a  language  any 
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more  than  the  abstraction  mechanisms  of  high  level  programming 
languages  extend  the  computational  power  of  machine  level 
languages*  Conversely*  just:  because  the  abstraction  mechanisms 
are  not  part  of  the  machine  language*  does  not  mean  that  their 
presence  is  unnecessary  or  illusory*  In  other  words* 
definitional  facilities  are  needed  even  if  it  turns  out  that 
these  can  be  explained  away  at  the  assertional  level*  The 
assertional  and  definitional  levels  each  have  their  own  purpose* 
methodology  and  standards  of  adequacy* 

It  is  this  separation  of  concerns  that  might  permit  the 
"logical"  and  "non-”logicalM  approaches  to  be  profitably  unified 
within  a  single  representation  scheme*  By  using  a  language  like 
KL  to  make  statements  or  ask  questions  about  a  world*  and  some 
ideal  object— centered  language  to  organize  in  a  convenient  way 
the  relevant  terms  being  used*  the  advantages  of  each  approach 
can  be  enjoyed*  Since  neither  scheme  is  required  to  deal  with 
issues  for  which  it  was  not  designed*  the  limitations  of  each  are 
minimized* 


6.2  THE  DEFINITIONAL  LEVEL 

If  it  is  inappropriate  to  speak  of  the  truth  value  of 
definitional  statements*  we  must  rely  on  some  other  method  to 
explain  their  import*  Perhaps  the  best  way  to  do  this  is  to 
consider  their  impact  at  the  assertional  level*  This  will  allow 
us  to  introduce  whatever  definitional  mechanisms  seem  appropriate 
provided  it  is  always  clear  at  the  assertional  level  exactly  what 
is  being  said  or  asked  about  the  world*  In  this  section*  I  will 
present  a  new  view  of  a  KB  that  takes  the  effect  of  definitional 
statements  into  account* 


6*2*1  Essential  And  Default  Properties 

In  English*  one  way  terminology  can  be  introduced  is  by  a 
statement  of  the  form 

By  an  a*  I  mean  ••• 


An  example  of  this  is  the  "Fly ingBi rd"  case  where  we  would  have 
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By  a  Fly  ingEird ,  I  mean  a  bird  that  flies* 

Of  course j  we  can  also  introduce  predicates  oi  more  than  one 
argument  such  as 

By  Uncle  «  I  mean  a  brother  in  law  of  a  parent. 

or  function  symbols  such  as 

By  mother,  I  mean  the  female  parent. 

The  effect  of  these  statements  at  the  assertional  level  is  that 
the  obvious  universally  quantified  material  equivalences  are 
always  known.  This  suggests  that  definitional  statements  such  as 
these  can  be  explained  by  dividing  a  KB  into  two  parts: 

KB  =  <W,C>. 

The  W  component  is  a  set  oi  sentences  of  1  expressing  what  is 
known  about  the  world  (as  before)  and  the  C  component  is  a  set  of 
definitional  sentences.  Assertions  about  the  world  are  added 
(via  TELL)  to  W  while  new  definitional  statements  are  made  to  C 
(via  some  new  operation).  Questions  about  the  world  will  always 
be  answered  with  respect  to  (WUC).  We  might  also  want  to  allow 
questions  about  the  terminology  being  used  which  could  be 
answered  with  respect  to  C  only.  In  iact ,  we  could  allow  a  KB  to 
be 

KB  =  <W1  ,  • • . , Wk,C> 

where  the  Wi  represent  distinct  (and  perhaps  incompatible)  views 


of  the  world  using 
take,  is  the  intent  of 
concepts  remains  fi*ed 


the  terminology  as  defined  in  C.  This,  I 
contexts  in  KL— ONE  where  the  set  of 


Of  course,  not  all  the  terras  we  will  want  to  use  will  have  a 
definition  in  the  above  sense.  We  may,  for  example,  wish  to 
introduce  terms  by  definitional  statements  such  as 

By  a  S  tuden  t  ,  I  mean,  among  other  things, 

a  person  with  an  associated  university  and 
and  area  of  study. 

This  could  be  represented  in  C  by  a  universal  quantification  of  a 
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material  implication  (instead  of  an  equivalence)®  In  this  case* 
being  a  person  and  having  a  university  and  area  of  study  is 
essential  to  being  a  student  (at  least  the  way  the  term  is 
intended  here)  but  not  sufficient®  However,  a  much  more 
troublesome  definitional  statement  is  one  that  uses  a  "prototype" 
such  as 

By  a  Lemon,  I  mean,  among  other  things, 

a  fruit  that  is  typically  (but  not  necessarily) 
yellow,  sour  and  round® 

The  intent  here  is  that  it  is  essential  to  be  yellow,  sour  and 
round  to  be  a  typical  lemon  but  that  it  is  not  essential  to  be 
typical  lemon  to  be  a  lemon®  However,  the  understanding  is  that 
a  KB  can  assume  that  a  lemon  is  typical  whenever  it  is  consistent 
for  it  to  do  so*  In  other  words,  a  lemon  defaults  to  being  a 
typical  lemon*  To  properly  account  for  this  type  of  definitional 
statement  at  the  assertional  level,  we  have  to  provide  a  method 
for  dealing  with  defaults*  The  rest  of  this  chapter  will  propose 
such  a  method* 

My  approach  to  defaults  (and  prototypes)  can  be  summarized 
by  saying  that  they  allow  the  user  of  a  KB  to  extend  the  KB  to  a 
new  state  and  answer  questions  in  this  new  state*  We  will  then 
have  two  query  operators:  ASK,  as  before,  and  ASK*  which 

operates  on  an  extended  KB* 

De  f  n  ASK*(cr,ra)  =  ASK  (  a  ,  AEx  t  (  m  )  )  • 

The  idea  is  that  AExt,  which  will  be  defined  in  section  three, 
applies  default  reasoning  and  makes  whatever  assumptions  it  can, 
arriving  at  a  new  KB  for  answering  questions*  For  example,  we 
might  start  with  a  KB  m  that  only  knows  that 

Lemon ( n ) • 

The  function  AExt  would  map  m  into  a  KB  that  also  knows  that 

Yellow(n),  Kound(n)  and  Sour(n) • 


Cf  course,  we  do  not  really  know  that  n  is 
current  KB  is  m  and  not  AExt(m)  but  the  latter 
when  the  defaults  are  carefully  chosen* 


yellow  since  the 
may  be  more  useful 
still  have 


Even  so,  we 
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“the  possibility  of  informing  m  that  n  is  green* 

Of  course*  we  could  consider  defaults  as  providing  real 
knowledge  of  the  world  by  defining  a  new  TELL  operation: 

De  f n  TELL*(a,m)  =  AEx t ( TELL ( a  , m )  )  • 

In  this  case*  if  the  the  KB  is  told  (via  TELL*)  that  n  is  a  lemon 
and  nothing  else*  the  net  effect  would  be  the  same  as  having 
informed  the  KB  that  n  was  a  yellow,  round  and  sour  lemon*  This 
version  of  TELL  will  always  result  in  a  KB  that  knows  the  colour 
of  a  lemon  -  either  the  colour  will  be  given  or*  if  it  is  not* 
this  is  because  the  colour  is  yellow*  This  is  not  an  altogether 
unreasonable  use  of  defaults  given  that  we  expect  only  a  small 
number  of  atypical  lemons* 

No  matter  which  interpretation  is  used  for  defaults,  the 
approach  will  be  the  samel  start  with  a  KB  and  extend  it  to 
another  that  has  made  various  assumptions  using  AExt • 

6*2*2  The  Representation  Of  Defaults 

A  major  obstacle  to  a  proper  treatment  of  defaults  is  that 
there  is  no  general  agreement  as  to  what  exactly  the  default 
should  entail*  None  of  the  three  existing  proposals  that  appear 
to  handle  defaults,  [Reiter  80],  [McDermott  and  Doyle  78]  and 
[McCarthy  80],  agree  completely* 

Consider  a  simple  case  of  a  default  such  as 

(1)  Typically,  a  bird  flies* 

Reiter  would  represent  this  by  a  default  rule 

Bird(x) : MFly ( x)  /  Fly(x). 

For  McDermott  and  Doyle,  this  would  be  a  sentence  in  a  modal 
logic 

( x ) [ Bird ( x )  a  MFly(x)  =  Fly(x)  ]. 

Finally,  McCarthy  might  capture  the  intent  of  (1)  by 

circumscribing  the  predicate 
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Atyp icalBird  =  Ax«Bird(x)  A-«Fly(x)  • 

Howeverf  with  no  other  information  about  the  world* 
circumscription  would  lead  to  the  assumption  that  every  bird 
flies*  an  assumption  not  shared  by  the  no n— mono tonic  logic  and 
default  logic  versions*  If  the  only  information  present  is  that 
some  bird  exists*  both  circumscription  and  default  logic  will  be 
willing  to  assume  that  a  flying  bird  exists*  although 
non— mono toni c  logic  will  not*  So  these  two  cases  are  sufficient 
to  demonstrate  that  the  three  approaches  disagree  in  what  should 
be  part  of  a  default  such  as  (1)* 

Where  the  three  approaches  agree,  on  the  other  hand*  is  that 

(1)  does  allow,  without  contradiction,  birds  that  are  known  not 
to  fly*  Moreover*  (1)  does  tell  the  KB  that  a  certain  set  of 
birds  do  fly*  This  suggest  rephrasing  (1)  as 

(2)  Every  (known)  bird  flies  except  those  that  are 
known  not  to  fly* 

Depending  on  whether  or  not  we  include  the  parenthetical  part  of 

(2) ,  this  leads  to  the  following  two  sentences  of  KL l 

(A)  (x)[Bird(x)  a  -»K-«Fly(x)  =>  Fly(x)3 

(B)  (x)  [  KBird(x)  a  -nK^Fly(x)  =>  Fly(x)  ]. 

The  first  sentence  ranges  over  all  birds;  the  second*  only  over 
the  known  birds*  The  difference  depends  on  having  a  KB  with 
incomplete  knowledge  of  the  birds*  For  example  if  we  have  a  KB 
that  only  knows  that 

Bird(nl)  v  Bird(n2) 

then  if  (A)  is  known  to  be  true,  the  KB  also  knows  that 
Fly(nl)  v  Fly(n2)* 

This  is  not  the  case  with  (B),  however,  since  neither  nl  nor  n2 
are  known  to  be  birds*  Similarly,  starting  with 

( Ex ) Bird ( x ) 

(A)  sanctions  the  assumption  that 


( Ex ) Bird(x) AFly(x) 
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bu"t  (B)  does  not*  In  factf  with  no  information  at  all,  (A)  , 
unlike  (B) y  but  like  the  circumscription  approachy  would  lead  to 
the  assumption  that 

( x) [ Bird (  x )  3  Fly(x)] 

For  the  time  present,  I  will  take  (A)  to  be  a  closer 
approximation  to  (1)  than  (B)*  I  will,  however,  be  returning  to 
the  second  reading  of  defaults  in  section  four* 

6*2*3  Prototypes 

We  can  easily  imagine  an  extended  notion  of  a  KB  now 
involving  three  components: 

KB  —  <W  y  C  y  D  • 

The  W  and  C  components  are  as  before;  the  D  component  is  a  set 
of  sentences  of  KL  (not  L)  representing  defaults  like  the  one  in 
the  previous  subsection*  The  C  and  D  components  together  make  up 
the  definitional  level:  C  contains  the  essential  properties  of 
the  terms  being  used,  while  D  contains  the  default  properties  of 
those  terms* 

One  distinc  t  disadvantage  of  this  characterization  of  a  KB 
is  that  it  forces  us  to  use  the  language  KL  as  part  of  a  KB*  So 
far,  we  have  been  able  to  get  by,  in  principle  at  least,  with 
first  order  logic,  using  KL  only  to  interact  with  the  KB.  But 
for  defaults,  which  do  make  reference  to  what  is  known,  it  would 
appear  that  we  need  KL* 

There  is,  moreover,  a  much  more  serious  problem  with  the  D 
component  of  a  KE*  Up  until  now,  a  change  to  a  KB  was 
conceptually  nonotonic  or  additive.  By  this  I  mean  that,  apart 
from  when  we  make  mistakes  or  change  our  minds,  there  is  never 
any  reason  to  remove  an  element  of  W  or  of  C*  That  is  to  say,  we 
acquire  knowledge  about  the  world  and  we  acquire  terminology. 
The  trouble  with  the  D  component  is  that  we  will  want  to  be  able 
to  remove  elements  without  admitting  that  an  element  was  placed 


there  incorrectly 


Page  6-12 


Suppose?  for  example?  that  D  contains  the  sentence  (A)  from 
the  previous  subsection  expressing  the  proposition  that? 
typically?  birds  fly.  If  we  are  now  interested  in  introducing 
the  predicate  "AustralianBird",  the  new  C  might  contain  a 
sentence  like 

(  x)  £  AustralianBird!  x)  =>  Bird(x)]. 

We  now  want  to  tell  the  KB  that  AustralianBird  is  a  subclass  of 
Bird  for  which  the  default  (A)  does  not  apply.  In  other  words  ? 
because  of  Autralian  birds  such  as  emus  or  ostriches?  it  is  no 
longer  reasonable  to  assume  as  a  default  that  these  birds  fly. 
This  is  not  to  say  that  the  KB  should  assume  as  a  default  that 
they  do  not  fly  but  only  that  it  should  not  assume  as  a  default 
that  they  do.  The  trouble  here  is  that  if  W  contains  only 

AustralianBird! n) 

then  the  KB  also  knows  that 

Bird ( n ) 

and  will  be  wanting  to  apply  the  default  and  assume  that  n  flies 
like  any  other  typical  bird. 

The  simplest  method  of  blocking  this  assumption?  as 
suggested  in  [ fieiter  and  Criscuolo  80]?  is  to  replace  (A)  in  D  by 

(A')  (x)  [Bird(x)  a  -»K-»£Fly  (  xj  a-.Aus tralianBird!  x)  ] 

^  Fly ( x ) ] • 

However?  it  does  mean  modifying  a  default:  every  time  a  new 

subclass  of  Bird  is  introduced  for  which  the  default  is  not 
desired.  In  fact?  the  only  time  we  could  leave  a  default  as  is 
is  when  we  wanted  the  subclass  to  have  the  default  or  when  the 
subclass  was  known  not  to  have  the  default  property  (e.g. 

penguins).  As  long  as  we  know  that  something  is  a  bird  and  do 

* 

not  know  that  it  does  not  fly?  (A)  will  apply  no  matter  what  we 
add  t o  D  ( or  C) • 

It  appears?  therefore?  that  (A)  does  not  do  what  we  want?  in 
general?  even  though  we  do  want  to  say  that  typically?  a  bird 
flies.  The  way  to  reconcile  this  with  the  case  of  Australian 
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birds  is  to  observe  that  Australian  bi r  ds  are  no  t  typical  with 
respect  to  flying  ability.  By  this  I  mean  that  it  is  not 
reasonable  to  assume*  without  further  evidence,  that  one  flies. 
So  we  can  still  maintain  that  a  typical  bird  flies  if  we  add  that 
Australian  birds  are  atypical. 

To  handle  this  and  keep  the  D  component  additive,  I  will  use 
a  new  predicate  formed  by  placing  a  V  before  an  existing 
predicate.  For  example,  VBird(x)  can  be  read  as 

x  is  a  protypical  instance  of  Bird 

or 

x  inherits  the  default  properties  of  Bird. 

Our  original  default  is  now  expressed  by 
(  x)  [  VBir  d  (  x  )  =>  Fly(x)] 

which  says  that  a  prototypical  instance  of  Bird  flies  or, 
equivalently,  that  anything  that  inherits  the  default  properties 
of  birds  flies.  The  Australian  bird  special  case  can  now  be 
expressed  by  something  like 

(  x  )  [  Aus  t  r  al  ianBird  (  x )  =>  ^VBird(x)  ] 

or,  equivalently 

(x)[VBird(x)  =  -iAustralianBird(x)  ]  . 

This  says  that  Australian  birds  do  not  inherit  the  default 
properties  of  birds.  Of  course,  birds  may  have  more  than  one 
default  property  and  we  may  wish  Australian  birds  to  inherit  all 
but  the  flying  ability.  This  can  be  achieved  by  having  more  than 
one  prototypical  predicate  associated  with  Bird. 

Defn  A  7-predica t  e  with  basis  pis  a  predicate  with  the  same 
ari ty  as  p  and  named  by  prefixing  a  V  to  p  and,  optionally, 
postfixing  a  colon  and  some  number  afterwards. 

Defn  A  7-sen  tenc  e  is  a  sentence  of  the  form 
( xl ) • . . ( xn )  [ Vp! k( xl  , .  .  .  ,xn )  3  o] 
where  a  contains  no  7-predicates. 


The  new  reading  for  Vp:k(x)  is 
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x  inherits  the  kth  default  property  of  p 
For  example,  we  might  have  the  following  V— sentences: 

( x ) [ 7Bir d : 1 (x)  =>  Fly(x)] 

( x) [ VBir d : 2 (x )  3  TwoLegged(x) ATwoWinged(x)  ] 

(  x)  [  VBir  d:  1  (  x )  o  ^AustralianBird(x)  ] 

So,  although  Australian  birds  are  atypical  with  respect  to 
flying,  they  can  be  typical  with  respect  to  limbs*  We  can  also 
have  7— predicates  of  more  than  one  argument  such  as 

( x) ( y ) [ VSpouse ( x , y )  ^  home ( xj =home (y ) ] 

read  as 

The  prototypical  Spouse  relationship  is  such  that  the 
two  parties  live  together* 

Note  that  there  is  absolutely  no  connection  implied  between 
Vp:k(x)  and  Vq:k(x) 

when  p  and  q  are  distinct  predicates*  The  only  implied 
connection  is  between  a  7— predicate  and  its  basis*  To  explain 
what  this  connection  is,  it  is  necessary  to  reconsider  the 
components  of  a  KB* 

A  KB  is  now  formed  out  of  three  components: 

KB  =  <W,C,P> 

where  W  and  C  are  as  before  but  constrained  not  to  use  any 
V-predicates*  The  P  component  is  a  finite  set  of  7— sentences 
which,  together  with  C,  makes  up  the  definitional  part  of  the  KB* 
By  restricting  the  form  of  P  in  this  way,  we  automatically 
guarantee  that  (W^cup)  is  consistent  whenever  (WUc)  is* 
Questions  are  asked,  as  before,  with  respect  to  (WUC)  using  ASK* 
If  we  want  to  ask  general  questions  about  prototypes,  this  can  be 
done  as  well  by  extending  KL  to  include  7— predicates  and  using 
(CUP) .  Normally,  however,  neither  ASK  nor  TELL  uses 
7-predicates*  These  are  part  of  P  but  not  of  the  language  of 
interaction  so  we  could  consider  always  answering  questions  with 
respect  to  (WUCUP). 
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So  far»  'there  is  no  notion  ol  a  default.  The  way  these  are 
handled,  in  general,  is  that  A Ex t  will  take  the  EB  and  extend  it 
by  telling  it  sentences  like 

(  x )  [  Bi  r  d  {  x )  a  -K-VBird(x)  =>  VBird(x)] 

The  actual  extension  produced  by  AExt  will  be  defined  in  the  next 
section*  These  sentences,  one  per  V-predicate,  are  what  I  will 
call  defaults* 

Defn  D(VpIk),  the  de f aul t  for  VpJk  is  the  sentence 
(  xl )  •  •  •  {  xn )  [  p  (  x  1  ,  •  •  •  ,  xn )  a  -K-* Vp  :  k  (  x  1  ,  •  •  •  ,  xn  ) 

=  Vp : k( x 1 , • • • ,xn ) j • 

So  the  connection  between  Bird  and  VBird  is  as  follows:  to 

extend  a  KB  by  applying  default  reasoning,  assume  that  any  bird 
that  could  be  a  prototypical  bird  based  on  what  is  known  is,  in 
fact,  a  prototypical  bird*  Stated  differently,  the  assumption  is 
that  a  bird  inherits  the  default  properties  of  birds  whenever  it 
is  consistent  with  what  is  known  for  it  to  do  so* 

As  an  example,  suppose  a  KB  contains  the  three  V— sentences 
above  as  elements  of  P  and  only  the  following  in  W: 

Eird(nl)  and  AustralianBird { n2 ) • 

Without  any  defaults  at  all,  this  KB  knows  that 

-VBird: 1 ( n2 ) 

so,  by  assuming  D(VBird:l),  the  KB  would  now  know,  among  other 
things,  that 

F ly ( n  1  ) 

and  the  default  would  not  apply  to  n2  since  it  was  known  to  be 
atypical • 

Before  making  all  of  this  precise  by  defining  AExt  (and, 
therefore,  ASK*  and  TELL*),  it  is  worth  examining  some  of  the 
advantages  of  this  approach  to  defaults* 

First  and  foremost,  the  third  component  of  a  KB  can  now  be 
treated  mo no  ton ica lly *  Except  for  when  the  user  makes  a  mistake 
or  changes  his  mind,  there  is  no  reason  ever  to  modify  or  remove 
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an  element  of  P*  Just  as  W  can  be  thought  of  as  knowledge  of  the 
world  and  C  as  knowledge  of  the  terms  being  used,  the  set  of 
V— sentences  in  P  can  be  viewed  as  knowledge  about  prototypes  and 


de  f aul ts • 

In 

this  sense. 

element  s 

of 

P  will  be  acauired 

analogously 

to 

those  of  W 

and  of 

C. 

Moreover,  P  can  be 

understood  (prior  to  the  application  of  defaults)  in  strictly 
first  order  terms  as  specifying  essential  properties  of  the 
7— predicat es •  With  the  under standing  that  these  predicates  are 
special,  the  KB  is  new  completely  first  order* 

In  addition,  the  specification  of  defaults  takes  on  a  more 
structured  appearance  from  a  user's  point  of  view*  Instead  of 
having  to  write  arbitrary  default  rules,  his  task  is  now  to 
specify  properties  of  prototypes*  To  the  extent  that  he  has 
chosen  his  predicates  carefully,  this  task  is  focussed:  decide 

for  each  predicate#  as  it  is  introduced,  what  default  properties 
should  be  associated  with  it*  Similar  considerations  apply  to  C 
except  that  essential  properties  are  involved  instead  of  default 
ones  • 

Finally,  by  structuring  the  KB  the  way  I  have,  only  a  single 
uniform  type  of  default  has  to  be  considered*  I  have  moved  all 
the  "content"  of  the  default  into  P  (as  properties  of 

prototypes),  leaving  only  the  basic  assumption  to  be  made  in  the 
default*  In  fact,  this  assumption  can  be  identified  by  the 
7— predicate  in  question  using  the  function  D*  In  some  sense,  a 
default  like  D(7plk)  is  a  prototypical  default  since  it  is  the 
basic  pattern  of  all  defaults* 

I  am  not  suggesting,  however,  that  a  user  should  specify  the 
definitional  level  of  a  KB  by  providing  the  sentences  of  C  and  P* 
The  interaction  language  for  the  definitional  level  might  center 
around  KL— ONE  style  concepts  where  both  essential  and  default 
properties  could  be  specified*  These  concepts  could  then  be 
"compiled"  into  the  appropriate  elements  of  C  and  P* 
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6.3  THE  INHERITANCE  CF  DEFAULT  PROPERTIES 

In  this  section!  I  will  formally  define  the  function  AExt 
which  specifies  how  defaults  are  to  be  applied.  The  definition 
is  based  on  the  notion  of  an  independent  default  described  below 
in  the  first  subsection.  Essentially,  the  idea  is  that  only 
defaults  that  can  consistently  be  assumed  without  regard  to  other 
possible  defaults  will  be  assumed.  In  the  second  subsection,  I 
will  show  why  not  all  defaults  are  independent  and  how  to  manage 
the  interaction  between  defaults.  Finally,  in  the  last 
subsection,  I  will  show  how  to  order  competing  default 
alternat ives • 


6.3.1  The  Application  Of  Defaults 

One  thing  to  notice  about  my  definition  of  defaults  is  that 
they  are  based  on  the  premise  that  something  can  be  assumed  to 
have  a  default  property  unless  it  is  known  not  to  have  that 
property.  For  example,  if  a  KB  knows  the  following  V— sentence 

(x)fVBird(x)  =>  Fly(x)  ]  , 

then  it  also  knows  that  the  default  D( VBird)  implies  that  the 
only  birds  that  do  not  fly  are  those  that  are  known  not  to  fly. 
The  import  of  this  is  that  if  a  KB  already  knows  that  there  is  a 
bird  that  does  not  fly  but  does  not  know  which,  then  the  default 
is  known  to  be  false  and  cannot  be  consistently  assumed. 

For  example,  consider  a  KB  that  knows  the  following 

Bird(nl)  ,  Bird(n2)  and  [  -.Fly  {  n  1 )  v-«Fly  (  n  2  )  ] 

This  KB  also  knows  that 

-.VBird(nl)  v  -.V3ird(n2) 

and  therefore  that 

(  Ex )  [  Bir  d  (  x  )  a  -iK-»  VBi  rd  (  x )  a  -.VBird(x)  ]. 

In  other  words,  this  KB  already  knows  that  the  default  D(VBird) 
is  false.  So,  if  we  want  AExt  to  take  a  consistent  KB  to  a  more 
knowledgeable  but  consistent  KB,  the  function  cannot  simply  be 
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defined  as  telling  the  KB  that  all  the  defaults  are  true* 

A  similar  situation  arises  if  we  have  two  defaults,  say  dl 
and  d2*  and  the  KB  knows  that  one  of  them  is  false.  Either 
default  could  be  assumed  but  once  it  has  been  assumed*  the  other 
default  cannot  be  assumed*  Since  we  have  no  reason  for 
preferring  one  default  to  another*  AExt  will  be  defined  in  such  a 
way  that  neither  default  will  be  taken*  Thus*  the  only  defaults 
that  will  be  assumed  are  those  that  can  be  assumed  independently 
of  all  others* 

In  the  following  definition*  I  will  assume  that  we  are 
dealing  with  a  finite  language*  and  therefore,  a  finite  set  of 
7— predicates •  So  the  only  defaults  we  have  to  consider  are 
D ( Vp : k )  where  Vp!k  is  a  predicate  of  the  language*  I  will  call 
this  set  of  defaults  D* 

Def n  A  set  of  defaults  S  c  D  is  a  def aul t  set  for  a  KB  m  iff 
there  is  an  element  w  of  m  such  that  every  element  of  S  is 
true  with  respect  to  w  and  m* 

Defn  A  default  d  e  D  is  i ndependen t  with  respect  to  a  KB  m  iff 
whenever  S  is  a  default  set  for  m,  (S^Cd) }  is  as  well* 

We  can  now  define  AExt  as  mapping  a  KB  into  another  that  believes 
all  the  independent  defaults  in  D! 

Defn  AExt(m),  the  default  extension  for  a  KB  m  is 
(wem  |  V(d,w,m}=T  for  all  d  independent  wrt  m] • 

It  is  easy  to  see  that  AExt  so  defined  takes  a  KB  into  one  that 
knows  at  least  as  much*  Moreover*  every  independent  default  is 
known  to  be  true  by  the  extended  KB*  Finally,  the  extended  KB  is 
consistent  since  the  set  of  independent  defaults  form  a  default 
set  as  the  following  theorem  demonstrates! 

Theorem  The  set  of  independent  defaults  is  a  default  set* 

I  Suppose  £dl*****dk}  is  the  set  of  all  independent 
defaults  with  respect  to  a  KB  ra*  The  empty  set  is  a  default 
set*  Since  dl  is  independent  £dl}  is  a  default  set  also* 
Since  d2  Is  independent  (dl*d2)  is  also  a  default  set* 
Continuing  in  this  way,  (dl , * . • , dk]  is  a  default  set* 


Proof 
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Corollary  AExt(m)  e  MD  whenever  m  is  representable. 

This  provides  us  with  a  semantic  characterization  of  AExt. 
I  will  now  consider  a  syntactic  characterization  by  defining  a 
sentence  A  of  KL  such  that 

AExt  {  M  (  KB  )  )  =  M  (  KB  U  [/A/]  }. 

Moreover  ,  A  has  the  property  that  it  is  uniquely  determined  by 

the  set  of  7-predicates  used  in  the  KB.  As  long  as  no  new 

V-predicates  are  introduced,  the  extended  KB  can  be  represented 
by  adding  (then  withdrawing)  /A/  to  the  KB. 

No  tat  ion  For  any  finite  set  O  and  F  e  [0  —  EL],  AND<0,F>  e  KL . 
AND<0,F>  =  (x)(x=x)  when  0  is  empty. 

AND<  (ol , . • •  ,  ok)  ,F>  =  (F( ol )  a  •  •  .  a  F( ok )  ]  otherwise . 

No  tat i on  If  S  £  KL ,  a/S  means  AND<S,Aa.a>. 

Defn  ID  (  d)  =  AND<  (  S  |  S£D}  ,  AS  .  [  K-*a/ (  SU  (d)  )  =>  K-»a/S]>. 

For  any  default  d,  ID(d)  is  a  sentence  of  KL  that  says  that  d  is 
an  independent  default.  This  is  e s tab 1 ist hed  by  the  following 
1 emma • 

Lemma  _1  d  is  independent  for  m  iff  V(ID(di),raj  =  T. 

Proof!  An  element  of  D,  d,  is  independent  with  respect  to  m  iff 

for  every  subset  S  of  D,  when  S  is  a  default  set,  S*J(d)  is 

also.  But  a  set  S  is  a  default  set  iff  V  ( -»K-«a/S  ,  m)  is  T. 

So  d  is  independent  iff  for  every  subset  S  of  D,  when  -«K-»a/S 
is  T  then  so  is  -»K-»a/(SU  (d]  )  •  Thus,  d  is  independent  iff 
I D ( d )  is  true  • 

Defn  A  =  AND<D ,  Ad  .  [  ID  (  ci )  =>  d]>. 

The  sentence  A  is  the  conjunction  over  all  defaults  that  if  a 
default  is  independent  then  it  is  true-.  So,  A  will  be  used  to 
conjecture  that  every  independent  default  is  true.  In  other 
words,  to  arrive  at  a  KB  that  believes  all  the  independent 

defaults,  we  need  only  teJ.1  it  that  A  is  true. 

Theorem  ( De  f aui t )  AExt ( M ( KB )  )  =  TELL ( A , M ( KB )  )  . 

Proof:  A  world  description  w  is  in  AExt  (  .V(  KB  )  )  iff  It  is  in 
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M(KB)  and  for  every  independent  default  d  ,  V(d»w,M( KB) )  is 
T*  By  lemma  1,  this  happens  iff  V ( ID(d)^d,w,M(KB) )  is  T* 
So  w  is  in  AExt ( M ( KB ) )  iff  it  is  in  M(KB)  and  V ( A , w ,M( KB) ) 
is  T  iff  w  is  in  TELL ( A , M ( KB )) * 

As  a  trivial  corollary*  to  this  theorem  we  have  that 

Corollary  ASK*  (  a ,  M  ( KBi)  )  =  yes  iff  KB  U  C/A/3  H  /a/. 

where  the  two  occurences  of  the  / — /  operator  are  with  respect  to 
different  KBs:  the  A  is  reduced  with  respect  to  KB  and  a  with 
respect  to  KBU[/A/)«  Unlike  any  other  approach  for  dealing  with 
defaults,  this  tells  us  how  to  answer  questions  in  the  presence 
of  defaults  in  strictly  first  order  proof- theoretic  terms* 


6.3*2  Interactions  Among  Defaults 

The  function  AExt  produces  only  consistent  KBs  by  only 
applying  defaults  that  are  independent*  In  many  situations*  this 
is  too  conservative  and  guarantees  consistency  by  refusing  to 
make  assumptions  that  it  could*  In  this  subsection  and  the  next* 
I  will  investigate  how  a  KB  can  be  told  to  use  a  default  in 
situations  where  the  default  is  not  independent*  The  simplest 
case  of  non— inde pendenc e ,  however,  which  is  where  a  default  is 
known  to  be  false,  is  also  the  most  troublesome  and  will  be 
discussed  separately  in  section  four*  The  examples  to  follow  in 
this  subsection  and  the  next  are  taken  mainly  from  [Belter  and 
Criscuolo  80]* 

Since  I  will  only  be  dealing  with  single  place  predicate  (or 
function)  symbols,  I  will  simplify  my  notation  somewhat  by 
dropping  the  7,  the  quantifier  and  the  variable*  I  will  use 
as  the  sentential  connective  for  7-sentences  and,  to  avoid 
confusion,  "Isa"  as  the  implication  connective  for  elements  of  C* 
For  example,  we  could  have 

Bird:  1  -*  Fly 

Bird:  2  -*  TwoLegged  a  TwoWinged 

AustralianBird  isa  Bird 

standing  for  two  elements  of  P  and  one  from  C*  Finally,  when  a 
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single  default  property  is  relevant  to  an  exarapley  I  will  not  use 
the  subscript  on  the  V— predicate  even  though  there  may  be  many 
other  desirable  default  properties* 

The  kind  of  default  interaction  I  will  be  concerned  with  is 
when  we  have  two  elements  of  P  such  as 

A  ~ *  •  •  • 

B  •  •  • 

and  there  is  something  which  is  both  an  A  and  a  B.  This  assumes 
that  A  and  B  are  not  mutually  exclusive*  For  example,  if  we  have 

Adult  -*  Employed 
Child  -*  -"Employed 
Child  isa  -"Adult 


there  is  no  way 
an  instance  of 
interacting  defa 
important  to  li 
mutual  exclusion 


for  the 
b  o  th 
ults  is 
mit  the 
wh  enev 


defaults  to  interact 
classes*  In  fact, 
complex  enough  to  s 
possible  interactions 
er  possible* 


since 

the 

ugges t 
by  s  t 


nothing  can 
managemen  t 
that  it 
ating  rules 


be 
of 
i  s 
of 


A  second  trivial  case  of  default  interaction  is  when  it  is 
possible  to  allow  both  defaults  to  be  taken*  For  example,  if  we 
have 


Student  -•  Undergraduate 
TaxiDriver  -•  NightWorker 


then  we  can  let  a  student  taxi  driver  default 
night  worker  and  an  undergradua te  student*  Thi 
nothing  is  known  about  the  student  taxi  drive 
defaults  D(VStudent)  and  D( VTaxiDriver )  are  ind 

On  the  other  hand,  if  we  have  the  foliowin 


to  being 

bo 

th  a 

s  can  be 

done 

when 

r  since 

the 

two 

ep  enden  t • 

£ 


Quaker  -*  Pacifist 
Republican  -•  -"Pacifist 

and  the  KB  knows  that 


Quaker ( j ohn ) ,  Republican! george) 

Quak er( r ic hard ) ,  Republican! r ichardj 
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then  it  also  knows  that 

iVQuaker  (richaru)  v  -iVRepublican(richard) 

since  Richard  cannot  be  both  a  pacifist  and  a  non-pacifist. 
Thus,  the  KB  knows  that 

-»D(  VQuaker }  v  -*D  (  ^Republican) 

and  so,  the  two  defaults  are  not  independent.  If  nothing  further 
is  done,  AExt  will  add  neither  default  and  so  the  KB  will  not 
assume  that 

Paci fist ( John )  and  -»Pacif  ist  (  george) 
as  it  intuitively  should* 

To  get  around  this  problem,  we  have  to  have  a  strategy  for 
dealing  with  the  default  for  Quaker  Republicans*  The  intuitive 
solution  here  is  that  these  should  neither  inherit  pacifism  nor 
non— paci f ism •  This  can  be  achieved  by  stating  that  Quakers  do 
not  inherit  the  default  property  of  Republicans  and  conversely: 

Quaker  —  -^Republican 
Republican  -•  -»Quaker 

With  these  two  V— sentences,  the  KB  now  knows  that 

-•VQuaker  (  r  i  char  x  )  ,  -»V Republic  an  (  r  i  chard ) 

and  so,  the  two  defaults  are  once  again  independent  and  will  both 
be  added  by  AExt  as  desired* 

A  common  situation  where  a  preference  is  required  between 
two  defaults  is  when  one  class  is  a  subclass  of  another*  For 
example,  if  we  have 

Canadian  -•  Engl  i  shSpeakin g 
Quebecois  isa  Canadian 
Quebecois  -•  -*EnglishSpeaking 

and  the  KB  knows  that 

Queb ec oi s ( p ierre ) , 


it  also  knows  that 
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-«D(  VQuebecois  )  v  iD{  VCanadian)  • 

This  is  a  situation  where  our  strategy  is  "to  preier  the  Quebecois 
default*  To  achieve  this  we  need  only  say  that  Quebecois  do  not 
inherit  this  default  property  of  Canadians: 

Canadian  -•  -»Quebecois* 

This  allows  Pierre  to  inherit  as  a  default  the  property  of  being 
non— English  speaking* 

Similar  considerations  apply  when  one  class  defaults  to 
being  a  subclass  of  another*  If  we  have 

Adult  -*  Employed 

H  ighScho  olD  ropou  t  -*  Adult  a  ^Employed, 

there  will  be  default  interaction  whenever  someone  is  a  high 
school  dropout*  In  this  case,  we  want  to  assume  that  the 
individual  is  unemployed  and,  therefore,  does  not  inherit  the 
default  property  of  adults: 

Adult  -•  -iHighSchoolDropout 

Another  way  of  looking  at  this  is  that  a  high  school  dropout 
defaults  to  being  an  adult  but  an  atypical  adult* 

A  preference  between  defaults  may  also  be  warranted  when 
neither  class  is  related  to  the  other*  For  example,  if  we  have 

FullTime  Student  -•  -^Employed 
Adult  -*  Employed 

then  to  handle  the  interaction  when  there  is  an  adult  full  time 
student,  we  will  probably  want  to  say  that  this  person  defaults 
to  being  unemployed  and  so 

Adult  -  -r»Fu llTimeStuden t 

should  be  added* 

Finally  it  should  be  noted  that  there  can  be  a  multi-way 
conflict  of  defaults.  If  we  have  the  following 

Univers i tyEuployee  —  Tutor  v  F acul tyMember 
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Adul t  -*  -iTutor 

Part  Time  Student  -*  uFacultyMember 

■then  someone  who  is  an  adult  university  employee  defaults  to 
being  a  faculty  member*  someone  who  is  a  part  time  student 
university  employee  defaults  to  being  a  tutor  and  someone  who  is 
an  adult  part  time  student  defaults  to  being  neither  a  tutor  nor 
a  faculty  member*  In  this  example*  the  conflict  occurs  when 
someone  is  an  adult*  part  time  student,  university  employee*  To 
resolve  the  conflict*  we  might  insist  that  these  individuals  are 
typically  tutors  and*  therefore,  not  typical  adults: 

Adult  -•  -sUniversi tyEmployee  v  -sPar tTimeStudent  • 

6*3*3  Ordering  Default  Alternatives 

In  some  cases*  it  is  desirable  to  specify  a  number  of 
defaults  and  some  order  in  which  they  should  be  attempted*  For 
example*  suppose  we  have  the  following 

Student  -*  horae=Toron to 
GradStudent  isa  Student* 

If  we  are  considering  the  default  home  for  graduate  students, 
there  are  a  number  of  alternatives*  In  the  last  subsection*  I 

showed  how  to  give  these  students  no  default,  the  Toronto  default 

or  a  new  default,  say*  Montreal*  However*  we  can  do  more  than 

this*  We  might  want  to  say  that  the  default  home  of  graduate 

students  is  Toronto  and*  barring  this,  Montreal*  By  this  I  mean 
that  if  a  graduate  student  cannot  inherit  the  Toronto  default*  it 
should  inherit  Montreal  as  its  default  home*  This  can  be 
achieved  by  adding 

GradStudent  -•  home=Toronto  v  home=  Mon tr eal  • 

In  this  case*  there  is  no  conflict  betweep  the  two  defaults  but 
notice  what  happens*  If  we  have  a  KB  that  knows  that 

GradStudent(nl) * 

GradStudent (n2) *  home { n2 ) £Mon treal * 

GradStudent  (  n  J)  *  home  (nil  ^Toronto  * 

Grad Stud  ent (n4)  *  home! n4 ) = Vane  ouve  r  * 
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then  the  KB  will  assume  by  default  that 

home ( nl ) ^Toronto ,  home (n2 ) =Toronto 
and  home ( n3 ) =Montreal • 


The  reason  lor  this  is  that  both  nl  and  n2  will  be  assumed  to  be 
typical  students  and  typical  graduate  students  andy  so y  living  in 
Toronto#  The  student  n4  is  known  to  be  an  atypical  student  and 
an  atypical  graduate  student  so  no  default  can  be  inherited  for 
him*  The  student  n3»  on  the  other  handy  cannot  be  a  typical 


stude 

nt  since 

he 

does 

not  live 

in  Toronto* 

He 

cany 

however  y 

be 

as  sum 

ed  to  be  a 

typ 

ical 

graduate 

student 

a  nd 

so 

is 

assumed 

to 

live 

in  Montre 

al  • 

The  net  effect  of 

this 

is 

that 

the  Toron 

to 

default  will  be  tried  first  andy  if  it  cannot  be  usedy  the 
Monteal  default  is  used* 

To  achieve  the  opposite  order  is  somewhat  more  complicated* 
First  of  ally  since  we  do  not  want  to  immediately  inherit  Toronto 
as  the  defaulty  we  must  insist  that  graduate  students  are  not 
typical  students*  Once  this  is  doney  we  specify  the  order  of 
inheritance  using  disjunction  as  above*  In  other  wordSy  we 
replace  the  above  7— sentence  for  GradStudent  by 

Student  -*  -^GradStudent 

GradStudent:  1  -*  home=Mon  tr  eal 

GradStudent : 2  —  home=Mon tr eal  v  hoae=Tor onto* 

For  the  above  KB,  we  then  end  up  with  the  foilwing  defaults: 

home(nl) =Montrealy  hornet n2) =Torontc 
and  home ( n3 ) =Mon t real 


where  the  order  of  the  defaults  has  been  reversed  so  that 
Montreal  is  tried  as  a  default  before  Toronto*  Notice  that  this 
required  two  separate  V— predicates  to  achieve  the  effect  but  that 
the  order  in  no  way  depends  on  the,  numeric  order  of  the 
subscripts  of  the  V- predica t e s .  This  example  suggests  how  a  set 
of  defaults  can  be  attached  to  a  prototype  and  applied  in  some 
definite  order: 


A  :  1  -  atl 

—  a  1 


a  2 


a:  2 


v 
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«  «  « 

Aik  -•  a  1  v  •••  v  ak 


In  this  case,  an  A  will  inherit  al  and  barring  that  a.2  and  so  on 
up  to  ak* 

When  two  defaults  conflict,  but  only  partially,  there  is  a 
new  possibility  that  arises  which  is  to  attempt  inheriting  both 
defaults*  Suppose  we  have,  for  example, 

(A)  Employee  —  home=workplace 
{  B)  Marr  iedPerson  -®  home=  home  {  spouse  )  « 


There  will  be  a  conflict  here  whenever  all  that  is  known  is  that 
an  employed  married  person  does  not  work  at  the  same  place  where 
his  spouse  lives*  Otherwise,  there  is  no  conflict*  In  general 
then,  there  a  number  of  inheritance  strategies  we  can  consider 
for  an  employed  married  person! 


1* 

2. 

3. 

4. 

5. 

6. 

7. 

8. 
9. 

10. 


Use 

nei the  r 

(A)  nor 

Use 

(A)  only* 

Use 

(B)  only* 

Use 

(A)  if 

possible , 

Use 

(B)  if 

possible, 

Use 

both  i f 

possibl e 

Use 

both  if 

possible 

Use 

both  if 

possible 

Use 

both  i f 

possible 

Use 

both  if 

possible 

B)  . 

else  use  (E ) • 
els e  us e  ( A )  • 

(else  use  neither)* 
el se  use  ( A } « 
el se  use  ( B ) • 
else  use  (A),  else  use 
else  use  (B ) ,  else  use 


(B)  . 
(A)  . 


I  have  already  considered  how  to  achieve  the  first  five 
strategies,  so  I  will  only  deal  with  the  last  five* 

Since  for  the  last  five  strategies  we  do  not  automatically 
assume  either  (A)  or  (B)  for  employed  married  persons,  we  must 
first  of  all  say  that  married  people  are  not  typical  employees 


and  vice-versa 
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Employee  -•  -iMarriedPerson 
MarriedPerson  -*  -"Employee 

Once  "this  Is  done)  the  simplest  way  to  achieve  the  last  five 
strategies  is  to  define  a  new  predicate  “Employ edMarr iedPerson" 
in  the  obvious  way  and  to  attach  defaults  to  this  predicate* 
Strategy  6  can  be  handled  by  having 

EmployedMar  riedPerson  :  1  -* 

home=hoae ( spouse )  a  home= workp lace • 

Strategy  7  involves  adding  to  this 

Empl oyedMar  riedPe rson  I  2  -*  home-wor kplace  • 

For  strategy  8t  this  last  V-sentence  becomes 


EmployedMarriedPerson  I  2  -»  horn e=hom e  (  spouse  )  • 


Finally»  strategies  9  and  10  are  handled  by  adding  to  either 
strategy  7  or  strategy  8  the  V— sentence 


EmployedMarriedPerson:  3  -* 

horae  =  h.ome  (  spouse  )  v  home= workp lace • 


Notice  that  if  (A)  is 
employment  is  knownf 
well*  Similarly!  if 
home  of  the  spouse 
default*  So  for  the 
can  be  assumed)  the 
employment  or  home  of 
known  by  default • 


assumed  and  eit 
then  by  default 
(B)  is  assumed  a 

is  knownt  the  other 
last  five  strategies! 
effect  is  that  if  any 
the  spouse  are  known 


o  f 
as 
the 
known  by 
and  ( B ) 
place  of 
all  three  become 


her  the  home  or  place 
!  the  other  becomes  known 
nd  either  the  home  or 
will  also  be 
if  both  (A) 
of  the  hornet 


It  is  important  to 
proposed  for  ordering 
unordered  collection  of 
given  that  this  hind 
"heuristic"  or  "non-logi 
on  top  of  the  logical 
suggestt  on  the  other 


stress  once  again  that  the  method  I  have 
defaults  assumes  nothing  other  than  an 
V— sentences*  This  is  somewhat  surprising 
of  ordering  is  normally  thought  of  as  a 
cal"  constraint  that  would  have  to  placed 
framework*  The  examples  of  this  section 
handf  that  the  ordering  of  default 


alternatives  is  part  of  the  logic  of  defaults  and  prototypes. 
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6.4  LIMITATIONS  AND  EXTENSIONS 

In  this  section  I  will  consider  two  of  the  most  serious 
limitations  involved  in  my  treatment  of  defaults.  The  first 
concerns  the  problem  of  unknown  non— pro to  typical  instances  and 
the  second  is  the  method  used  to  specify  non-prototypical 
subc lasses • 

If  we  have  the  following  V— sentence  in  a  KB 

Bird  —  Fly 

then*  as  I  have  already  mentioned;  to  use  the  associated  default 
D(VBird) *  it  must  be  the  case  that  it  is  consistent  with  what  is 
known  that  every  bird  that  does  not  fly  is  known  not  to  fly.  In 
particular;  if  the  KB  only  knows  that 

(Ex)  [Bird(x)A-iFly(x)  ]  and  Bird(nl); 

the  default  is  known  to  be  false  and  sof  cannot  be  consistently 
assumed.  In  particular;  the  KB  will  not  be  willing  to  assume 
that  nl  flies.  However  Reiter;  McCarthy  and  McDermot t— Doyle  may 
disagree  on  the  details  of  defaults;  they  all  do  agree  that  the 
assumption  that  nl  flies  is  warranted. 

In  one  sense;  this  limitation  of  defaults  is  Justified.  If 
the  KB  does  not  know  the  identity  of  the  bird  that  does  not  fly 
then  it  has  no  way  of  knowing  whether  or  not  nl  is  this  bird. 
Thus;  the  assumption  that  nl  flies  may  be  contradicting  what  is 
already  known  and  is;  consequently;  not  safe.  Looked  at 
differently;  however;  perhaps  the  default  should  sanction  the 
assumption  that  nl  is  not  the  unknown  atypical  bird  and; 
therefore;  that  it  is  reasonable  to  assume  that  it  flies. 

One  way  around  this  particular  occurrence  of  the  problem  is 
to  have  the  default  range  over  the  known  birds  and  not  the 
unknown  birds: 

D(VBird)  =  (x)UBird(x)  a  -»K-.VBird  (x)  => 

VBird(x) ] 

In  this  case;  the  default  is  consistent  with  what  is  known  and  so 
assumed.  This  is  because  the  unknown  non— flying  bird  is 


can  be 
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not  among  the  known  birds.  The  net  effect  is  that  since  nl  is  a 
known  birdf  it  would  be  assumed  to  fly,  as  desired.  However* 
this  version  of  defaults  has  a  technical  problem  of  its  own. 

Suppose  we  have  a  KB  that  knows 

Bird(nl)  and  [Fly(nl)  ~=>  Bird(n2)3 

If  we  now  add  the  default  ranging  over  the  known  birds,  we  end  up 
assuming  that 

Fly(nl)  and  Bird(n2) 

but  do  not  (yet)  get  that  n2  flies  since  it  was  not  a  known  bird 
in  the  original  KB.  To  obtain  this  property  for  n2,  we  have  to 
add  the  default  to  the  KB  a  second  time  since  the  set  of  known 
birds  has  changed.  In  other  words,  under  this  new  interpretation 
of  defaults,  the  defaults  have  to  be  applied  more  than  once  since 
each  application  may  introduce  new  known  instances  of  a 
predicate.  I  believe  that  the  defaults  would  have  to  be  added 
only  finitely  many  times  before  no  new  known  instances  are 
produced  and  equilibrium  is  achieved.  I  have  yet  to  prove  this, 
however,  and  even  if  it  is  true,  the  mechanism  is  terribly 
c  1  um  s  y  • 

Making  defaults  range  over  the  known  instances  of  a  class 
does  not  help  when  the  unknown  atypical  element  is  known  to  be  an 
instance  of  the  class.  For  example,  consider  the  rule  that 
states  that  a  person  is  innocent  until  proven  guilty: 

Person  -•  Innocent 

Suppose  we  have  a  group  of  people  such  that  it  is  known  that  at 
least  one  of  them  is  guilty! 

Person(nl),  Person(n2) ,  Person(n3) ,  Person(n4) 

[ilnnocentl  nl  )  v  -» I  nnocen  t  (  n2  )  ] 

In  this  case,  the  default  is  known  to  be  false  regardless  of 
whether  it  is  understood  as  ranging  over  all  people  or  just  the 


known  people.  Yet 

it 

would 

be 

nic  e 

t  o 

partially  apply  the 

default  so  that 

a  t 

least 

n3 

and 

n4 

would  default  to  being 

The  problem  is  distinguishing  nl  and  n2  from  n3  and 


i nnoc  en t • 


Page  6—30 


n4*  To  say  that  nl  and  n2  are  suspicious  because  it  is  known 
that  at  least  one  of  them  is  guilty  does  not  work  since  it  is 
also  known  that 


[-»Innocent(nl)  v  -»Innocent(n2)  v  -»Innocent  (  n3  )  J 


which  suddenly  makes  n3  look  suspicious  as  well.  What  we  really 
have  to  know  is  that  nl  and  n2  are  the  only  known  suspects*  This 
suggests  handling  this  example  as  follows: 

Person  -*  Innocent  a  -^Suspicious 
Suspicious ( nl ) y  Suspi cious ( n2 ) 

[  -ilnnocen  t  (  nl  I  v  -^Innocent  { n2 )  ] 


This  will  allow  anyone  other  than  nl  and  n2  to  be  assumed 
innocent  at  the  expense  of  having  a  predicate  "Suspicious"  to 
which  all  candidate  atypical  persons  belong*  More  generally*  we 
can  handle  the  presence  of  an  unknown  atypical  instance  of  a 
class  provided  the  instance  is  known  to  be  a  member  of  another 
class  all  of  whose  instances  are  atypical  instances  of  the  first. 
That  is*  if  we  have 


A  —  a » 


then  the  only  way  we  can  know  something  like 
(  Ex )  [  A  ( x  )  a  -ma  ] 
is  when  we  know  both 

(  Ex )  [  A  ( x  )  a  -»a  a  Kp  ] 

and 

A  -*  -»p 


which  is  precisely  what  we  did  with  the  above  example  (A=Person, 
os=  Innocent  and  p—  Suspicious )  •  If  we  cannot  limit  the  unknown 
instance  for  some  choice  of  p,  then  the  default  cannot  be  used* 
In  other  words*  to  be  able  to  apply  a  default*  we  have  to  arrange 
the  KB  in  such  a  way  that  any  possibly  atypical  instance  of  a 
class  is  known  to  be  atypical*  This  does  not  mean*  for  example* 
that  we  have  to  know  if  a  person  is  innocent;  what  we  have  to 
know  is  if  a  person  is  innocent  by  default  * 
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This  a  serious  limitation  when  "the  standard  semantic  network 
inheritance  method  is  used*  A  good  example  is  the 

Quebecois-Canadian  one  from  section  three*  Here  we  have  that 

Quebecois  isa  Canadian 
Canadian  -•  Engli  shSpeaking 
Quebecois  -*  'i£nglishSpeaking« 

The  standard  semantic  network  inheritance  strategy  is  the 
pre-emptive  one!  being  a  Quebecois  overrides  being  a  Canadian 
with  respect  to  language*  As  noted  in  section  three,  to  achieve 
this  strategy,  we  have  to  say  that  a  Quebecois  does  not  inherit 
the  default  property  of  Canadians: 


Canadian  -*  '"Quebecois 


The  trouble  with  this  is  that  a  Quebecois  automat ically  becomes 
an  atypical  Canadian*  Consequently,  unknown  Quebecois  are 
unknown  atypical  Canadians*  Since  Just  about  every  class  in  a 
standard  semantic  network  can  be  expected  to  inherit 
pre-emptively  from  its  superclass,  Just  about  every  class  will 
have  the  property  that  its  unknown  instances  are  unknown  atypical 
instances  of  another  class*  Unless  something  is  done  to  handle 
defaults,  assertions  such  as 

(Ex)A(x)  or  A(nl)vA(n2) 

will  Just  about  always  be  problematical*  Perhaps  this  explains 
better  than  anything  why  this  kind  of  assertion  is  troublesome 
for  a  semantic  network.  Unfortunately,  it  also  means  that  there 
is  no  accepted  tradition  for  dealing  with  default  inheritance 
involving  unknown  atypical  instances*  Again,  consider  the  above 
example  and  suppose  it  is  known  that 

Canadian ( John ) ,  Canadian ( Joe )  and 

[Quebecois( John)  v  Quebecois! Joe ) ] 

I  think  a  case  could  be  made  for  each  of  the  following  results 
once  all  defaults  had  been  applied: 

1*  Nothing  is  assumed  about  the  language  of  John  or  Joe* 
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2*  Both  John  and  Joe  have  been  assumed  to  speak  English* 

3*  It  has  been  assumed  that  exactly  one  of  John  or  Joe 

speaks  English* 

4*  It  has  been  assumed  that  at  least  one  of  John  or  Joe 

speaks  English* 

5*  It  has  been  assumed  that  at  most  one  of  John  or  Joe 

speaks  English* 

The  alternative  that  will  prove  the  most  useful  here  remains  to 
be  seen* 

The  above  example  leads  to  the  second  undesirable  feature  of 
ray  approach  to  defaults*  The  problem  is  that  the  V— sentence  that 
assigns  a  default  language  to  Canadians 

Canadian  -*  Engl ishSpeaking 

looks  and  behaves  exactly  like  the  7-sentence  which  says  that 
this  default  should  not  apply  to  Quebecois 

Canadian  -*  -aQuebecois* 

To  say  that  a  Quebecois  is  an  atypical  Canadian*  we  end  up  having 
to  assume  without  any  evidence  that  a  Canadian  is  not  only 
English  speaking  but  not  Quebecois  as  well*  What  would  be 
preferable  here  is  that  nothing  be  assumed  regarding  whether  or 
not  the  Canadian  is  Quebecois • 

This  suggests  that  the  general  format  for  a  default  should 
be  what  is  termed  in  [fieiter  80]  "non-normal": 

(  x)  [  Canadian  (  x)  a  VCanadiant  x  )  a  ACanadian ( x) ] 

3  ACanadian(x) ] 

where  I  have  intoduced  a  new  kind  of  predicate*  ACanadian*  The 
intended  reading  of  ACanadian  is 

x  has  the  default  property  of  Canadians* 

The  reading  of  VCanadian(x)  remains  the  same: 


x  is  a  prototypical  instance  of  Canadian 
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or 

x  inherits  the  default  property  of  Canadians* 


The 

difference 

between  the  two  is 

that  ACanadian  can 

be 

true 

o  f 

an 

indi  vidual 

without  it  even 

being  a  Canadian* 

In 

fact  , 

the 

A— predicates  can  be  defined  completely  in  terms  of  other 
predicates! 

(x)[  ACanadian(x)  =  Engli shSpeaki ng (x)  ]  • 

In  other  words,  to  be  English  speaking  is  the  same  as  having  the 
default  property  for  Canadians*  On  the  other  handt  V— predicates 
will  only  have  essential  conditions  associated  with  them: 

(  x  )  [  VCan  adi  an  (  x )  -»Quebec  ois  (  x  )  ]  • 

What  this  buys  us  is  that  a  Quebecois  will  not  inherit  by  default 
the  language  of  typical  Canadians  andf  at  the  same  time* 
Canadians  will  not  inherit  the  property  of  being  non— Quebecois 
(as  we  had  before)* 

This  means  that  the  P  component  of  a  KB,  like  the  C 
component  will  contain  both  universally  quantified  equivalences 
and  implications*  The  equivalences  will  all  be  of  the  form 

(  xl  )•••(  xn  )[  Ap:  k  (  xl  ,-*•*,  xn  )  =  a] 

where  a  contains  no  A— predicates  and  no  V— predic a tes •  The 

implications  will  be  the  V— sentences  of  before  where  the 
consequent  is  further  constrained  not  to  contain  any 

A— predicates .  The  A-sentences  are  used  to  say  exactly  what  the 
default  properties  are  and  the  7-sentences  are  used  to  say  what 
the  exceptional  cases  are* 

There  is,  in  addition,  another  reason  for  considering  the 
use  of  A— pr edic a t e s •  In  a  recognition  context,  we  might  want  to 
be  able  to  conjecture  that  anything  satisfying  the  essential 
properties  of  a  class  and  all  the  prototypical  properties  of  the 
class  is  an  instance  of  the  class*  Suppose  that  in  the  C 
component  of  a  KB  we  define  the  essential,  properties  of  a  class 
using  yet  another  predicate  Cp(x)  read  as 

x  satisfies  the  essential  properties  of  p. 
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The  understanding  here  is  that  p  implies  dp 
vice— versa#  For  example ,  we  might 

specification  of  "Lemon”  that  includes 
prototypical  elements: 


but  not  necessarily 
have  the  following 
both  essential  and 


ALemon l 1  =  Sour 

ALemon:2  =  Yellow 
ALemon: 3  =  Bound 
CLemon  =  Fruit 

This  says  that  part  of  being  a  lemon  is  being  a  fruit  and  that 
typically  lemons  are  yellowf  sour  and  round#  The  recogni t ion 
conjecture  for  a  predicate  p  we  may  wish  to  make  is: 

(  x)  [  LP  (  x  )  a  A  p :  1(  x )  a  a  A  p  c  k  (:x  )  a  -»K-»p  (  x ) 

=>  p(x)] 

For  lemons,  this  conjecture  is  that  any  sour,  yellow,  round  fruit 
for  which  it  is  consistent  to  believe  that  it  is  a  lemon  is, 
indeed,  a  lemon*  We  can  easily  imagine  a  version  of  ASK  that 
operates  on  a  KB  that  has  been  extended  by  being  told  various 
recognition  conjectures.  The  nice  thing  about  these  conjectures 
is  that,  like  ray  defaults,  they  can  be  identified  completely  by 
the  predicate  involved.  Note  that  the  conjecture  will  not  work 
properly  if  we  replace  the  A-predicates  by  V— predicates •  We  want 
the  conjecture  to  be  based  on,  for  example,  sourness  and  not  on 
VLemon: 1  which  implies  sourness  but  about  which  we  may  have  no 
informati on . 


The  above  recognition  conjecture  Is  based  on  the  premise 
that  enough  prototypical  properties  have  been  specified  to 
warrant  the  recognition.  Indeed,  the  conjecture  is  that,  barring 
knowledge  to  the  contrary,  the  essential  conditions  together  with 
the  default  conditions  are  sufficient  to  guarantee  satisfaction 
of  the  predicate.  Obviously,  this  conjecture  is  limiting  in 
various  ways.  For  one,  it  does  not  allow  atypical  instances  of 
the  predicate  to  be  recognized.  More  importantly,  it  is  not  at 
all  sensitive  to  the  context  of  recognition  or  to  the  goals  of 
the  system.  A  proper  formalization  of  these  aspects  of 
recognition  remains  a  difficult  open  problem. 


CHAPTER  7 


CONCLUSION 


7.1  Contributions 

7.2  Technical  Results 

7*3  Directions  lor  Future  Research 


This  thesis  deals  with  some  of  the  formal  representation 
issues  that  underlie  the  use  of  an  incomplete  knowledge  base. 
The  motivation  behind  the  research  is  that,  to  effectively  deal 
with  incomplete  knowledge,  a  system  must  be  able  to  determine  the 
limits  to  what  it  knows.  Before  it  can  attempt  to  circumvent  its 
lack  of  knowledge  using  defaults  and  heuristics,  it  has  to  find 
out  where  knowledge  is  lacking.  This,  in  turn,  places  certain 
requirements  on  the  language  used  to  interact  with  the  knowledge 
base.  In  particular,  the  language  has  to  be  able  to  refer  to  the 
state  of  the  knowledge  base  as  well  as  to  the  state  of  the 
application  domain.  This  thesis  presents  the  design,  analysis 

and  application  of  a  language  with  this  expressive  ability.  In 

\ 

this  final  chapter,  I  will  briefly  review  some  of  the 
contributions  I  have  made  in  this  regard,  survey  the  technical 
results  I  have  been  able  to  obtain  and  suggest  directions  for 


future  research 
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7.1  CONTRIBUTIONS 

A  major  contribution  of  the  thesis  is  the  development  of  a 
formal  logical  language  KL  that  correctly  distinguishes  between 
what  is  true  in  an  application  domain  and  what  is  known  about 
that  domain  by  an  incomplete  knowledge  base*  The  theory  of 
knowledge  bases  embodied  in  the  logic  allows  for  a  very  general 
form  of  incompleteness  and  does  not  suffer  from  the  limitations 
of  the  approaches  based  on  multi-valued  logics*  The  theory  also 
allows  lor  the  presence  of  me ta— knowledge  so  that  a  knowledge 
base  can  know  about  the  relationship  between  what  it  knows  and 
the  application  domain*  Specifically*  it  can  have  (possibly 
incomplete)  knowledge  about  its  own  incompleteness*  The 
constraints  imposed  by  the  theory  (such  as  consistency, 
competence  and  closure)  in  no  way  reflect  on  the  application 
domain  but  only  on  the  knowledge  base's  view  of  the  application 
domain  and  itself* 

Another  contribution  of  the  thesis  is  the  application  of  the 
language  KL  to  the  definition  and  examination  of  knowledge  bases 
via  two  interaction  operations:  TELL  and  ASK*  Considerable 
expressive  power  is  gained  by  allowing  all  of  KL  to  specify  and 
query  a  knowledge  base*  In  particular,  to  the  best  of  my 
knowledge,  it  is  the  first  formal  interaction  language  to  allow  a 
knowledge  base  to  be  told  or  asked  if  it  has  complete  knowledge 
of  certain  aspects  of  the  application*  One  of  the  advantages  of 
this  is  that  the  closed  world  assumption  con  be  used  selectively 
and  need  not  be  an  essential  property  of  all  knowledge  bases* 

An  important  aspect  of  my  treatment  of  incomplete  knowledge 
is  that  it  has  both  a  semantic  and  a  proof —theoretic 
interpretation*  Many  of  the  design  decisions  made  throughout 
were  motivated  from  both  perspectives*  The  language  KL  has  the 
advantage  of  a  semantics  and  proof  theory  that  are  directly 
related  to  those  of  first  order  logic,  the  language  of  the 
knowledge  base*  A  somewhat  surprising  and  desirable  feature  of 
the  interaction  operations  is  that  they  too  can  be  understood 
both  semantically  and  proof  theoretically  in  first  order  terms* 
The  dual  characterizations,  more  than  anything,  account  for  the 
intuitively  plausible  properties  (and  limitations)  of 


t  he 
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framework. 

This  is  to  be  sharply  contrasted  with  other  approaches 
dealing  with  related  issues.  While  there  are,  for  example,  more 
powerful  non— mono ton ic  formalisms,  mine  is  the  first  to  be  given 
a  well-defined  semantic  interpretation.  Moreover,  the  formal 
semantics  I  have  proposed  is  not  simply  that  of  first  order  logic 
(constrained,  presumably,  by  additional  axioms).  It  does  not 
require,  for  instance,  extraneous  individuals  in  the  domain  of 
interpretation  such  as  terms,  sentences,  sets  of  sentences, 
possible  worlds  or  knowledge  bases.  But  most  importantly,  there 
is  a  very  definite  and  non— trivial  sense  in  which  my  proof  theory 
is  both  sound  and  complete.  If  the  framework  had  merely  been  a 
first  order  theory  whose  only  semantics  was  inherited  from  first 
order  logic,  there  would  have  been  no  independent  standard 
against  which  to  measure  the  adequacy  of  the  formalization. 

Another  advantage  of  my  framework  is  that  it  provides  a 
formal  foundation  for  some  of  the  traditional  object— centered 
approaches  to  Knowledge  Representation.  By  clearly 
distinguishing  between  the  language  of  a  knowledge  base  and  the 
language  used  to  interact  with  the  knowledge  base,  and  by 
factoring  a  knowledge  base  into  its  definitional  and  assertional 
components,  the  role  to  be  played  by  the  logical  and  non-logical 
representation  schemes  becomes  clear.  Of  course,  there  are 
substantial  problems  involved  in  combining  both  approaches  within 
a  single  unified  scheme,  but  my  framework  at  least  explains  why 
this  would  be  desirable  in  the  context  of  incomplete  knowledge 
ba  se  s  . 

Evidence  for  the  feasibility  of  this  unification  and  a 
further  contribution  of  the  thesis  is  a  formal  treatment  of 
defaults  and  prototypes.  In  particular,  it  is  shown  how  the 
ordering  aspect  of  the  inheritance  of  defaults  in  standard 
object-centered  languages  can  be  realized  within  the  logical 
framework.  The  proposal  has  the  advantage  of  being  simple  and 
uniform  (by  exploiting  the  expressive  power  of  KL ) ,  and  of 
having,  once  again,  both  a  semantic  and  proo f — t heore t ic 


interpre tat i on 
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7*2  TECHNICAL  RESULTS 

The  major  technical  results  of  the  thesis  deal  with  the 
equivalence  between  semantic  and  proof-theoretic 

characterizations  of  the  framework.  First  of  allf  there  are  the 
Soundness  and  Completeness  theorems  for  KL  itself  (with  and 
without  terms  and  equality).  The  Update  and  Query  theorems 

provide  the  equivalence  between  semantic  and  proof —theoretic 
versions  of  the  TELL  and  ASK  operations.  Finally*  the  Default 
theorem  relates  the  two  views  of  the  application  of  defaults.  In  , 
all  cases*  we  have  the  advantage  of  two  independently  justifiable 
interpretations  reinforcing  the  intuitive  acceptability  of  the 
framework. 

A  technical  result  related  to  the  above  is  the  Maximal  Set 
Theorem  which  shows  that  the  semantics  of  KL  can  be  restricted  to 
maximal  sets  of  world  descriptions  without  violating  either  the 
soundness  or  completeness  results.  This  somewhat  severe 
restriction  was  also  justified  in  other  ways.  For  example*  I 
proved  that  there  was  (in  the  propositional  case)  an  isomorphism 
between  the  maximal  sets  and  partial  world  descriptions.  I  also 
showed  that  maximal  sets  could  be  viewed  as  limiting  cases  of  a 
smaller  class  of  sets  which  were  representable  by  finite  sets  of 
sentences.  Finally*  I  demonstrated  that  maximal  sets  correctly 
characterize  world  knowledge  with  respect  to  a  language*  in  that 
for  any  two  distinct  maximal  sets*  there  is  a  sentence  of  the 
language  that  one  knows  and  the  other  does  not.  As  far  as  I 
know,  the  lattice  of  maximal  sets  is  the  first  general  semantic 
model  of  incomplete  knowledge  to  correctly  individuate  knowledge 
bases  in  this  sense. 

Among  the  other  technical  results  of  the  thesis,  there  is  a 
proof  that  the  language  KL  is  more  expressive  than  a  similar 
language  without  me t a— knowledge  (nested  K  operators)  and  that 
this  is  not  true  in  the  propositional  case.  There  are  also  three 
theorems  related  to  the  undecidab ili ty  of  KL:  one  shows  that  the 
monadic  version  of  KL  is  undecidablej  another*  that  ASK  is  not 
even  s erai — dec idab le ;  and*  finally,  one  that  shows  that  for  each 
pure  formula  of  KL  without  equality  there  is  a  formula  of  first 
order  logic  such  that  the  decision  problem  for  one  reduces  to 


Page  7  —  5 


that  of  "the  other* 


There  are  also  a  few  theorem 
philosophical  nature*  First  o 
that,  if  quantification  is  no 
nothing  can  be  known  to  have 
There  is  also  a  proof  that  KL  wit 
be  axiomatized  without  the  K  ope 
of  a  quantifier*  The  treatment  o 
unique  in  that  only  two  axiom  sch 
the  usual  theorems*  In  particul 
shown  to  be  a  theorem  of  KL  witho 
true  statement  of  identity  be  kno 
(non-rigid)  terras  into  KL  require 
Specialization,  it  is  also  shown 
avoided  whenever  the  referent  of 


s  about  KL  that  are  of  a  more 
f  all,  there  is  a  demonstration 
t  understood  subs ti tutionally , 
a  property  unless  everything  is* 
hout  equality  can  Just  as  well 
rator  by  generalizing  the  notion 
f  equality  in  KL  is  somewhat 
eraata  are  required  to  obtain  all 
ar,  the  Leibnitz  property  is 
ut  also  necessitating  that  every 
wn*  While  "the  introduction  of 
s  a  modification  of  the  Axiom  of 
that  the  modification  can  be 
the  term  is  known* 


7*3  DIRECTIONS  FCR  FUTURE  RESEARCH 

The  framework  I  have  developed  for  incomplete  knowledge 
bases  is  itself  incomplete  in  many  ways*  The  thesis  was  not 
intended  to  be  one  step  away  from  an  implementation  and  a  number 
of  difficult  problems  remain  to  be  solved  before  the  ideas  can  be 
incorporated  in  a  representation  scheme* 


First  of  a  11 , 
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th 
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a  t  yp  i  c  al 
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o  f 

organizing  and 
definitional  compon 


the  whole  definitional  component  of  the 
y  underdeveloped*  While  it  seems  clear  that 
nds  crucially  on  abstraction  mechanisms,  the 
ese  and  how  they  interact  with  the  assertional 
seen*  I  have  suggested,  for  example,  how 
understood  at  the  assertional  level,  but  my 
e  technical  drawbacks  ( regarding  unknown 
Is)  and  says  very  littie  about  the  management 
defaults*  Without  adequate  facilities  for 
structuring  large  knowledge  bases,  the 
ent  loses  much  of  its  raison  d'etre* 


The  query  language  I  have  proposed 
ways*  One  obvious  limitation  is  that 
WH— questions  of  any  kind* 


is  inadequate  in  many 
there  is  no  provision  for 


Because  of  the  possible  incompleteness 
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of  "the  system,  some  care  is  required  to  dist inguish  among,  for 
example,  the  students,  the  known  students  and  the  possible 
students  in  answers  to  questions.  Much  more  difficult  would  be  a 
proper  treatment  of  numeric  questions#  The  questions  that  asks, 
for  some  fixed  number,  if  there  are  (exactly  /  at  least  /  at 
most)  that  many  students  can  already  be  handled#  But  the 
question  that  asks  if  the  knowledge  base  knows  how  many  students 
there  are,  cannot  be  phrased  in  KL#  This  is,  •  nonetheless,  a 
reasonable  question  even  for  a  knowledge  base  that  knows  no 
number  theory# 

The  language  KL  itself  could  be  extended  in  different  ways# 
One  possibility  might  be  to  incorporate  lambda  abstraction  or 
definite  descriptions#  In  the  latter  case,  a  free  logic  version 
of  KL  or  one  with  truth  value  gaps  may  be  necessary#  Another 
possibility  is  to  extend  the  underlying  ^Language  by  including 
useful  theories  such  as  number  theory  or  set  theory#  These  would 
require  additional  rigid  predicates  over  and  above  the  equality 
predicate#  In  the  case  of  number  theory,  rigid  functions  (whose 
values  are  known  whenever  their  arguments  are  known)  would  also 
be  needed# 


Another  direct 
theories  about  kn 
proposed  is  one  sue 
this  theory  when 
The  conceptual  data 
me ta- theories  of 
conceivably  be  part 
question  here  is 
aspects,  could  be 
knowledge  base# 


ion  for  future  research  is  the  formulation  of 
owledge  bases  in  KL  itself#  The  logic  I  have 
h  theory  but  there  could  be  refinements  of 
special  kinds  of  knowledge  bases  are  desired# 
models  of  Database  Management  seem  to  be 
this  kind#  These  meta— theories  could  also 
of  the  knowledge  base  itself#  The  crucial 
how  a  meta-theory,  apart  from  its  descriptive 
made  to  influence  the  behaviour  of  the 


This  raises  a  variety  of  issues  relat 
called  the  heuristic  component  of  a  kno 
about  how  to  best  use  what  is  known#  I 
expressive  power  of  KL  is  needed  to 

incomplete  knowledge  bases#  This,  however 
operations  that  are  computationally 


ed  to  what  might  be 
wledge  base!  knowledge 
have  argued  that  the 
specify  sufficiently 
,  leads  to  ASK  and  TELL 
intractable#  Either 


expressive  compromises  will  have  to  be 


made  or  a  substantial 
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heuristic  component  will  be  needed*  Heuristic  knowledge  is 
obviously  an  important  component  of  many  current  knowledge— based 
systems*  But  for  a  system  to  exhibit  a  certain  behaviour  is  one 
thing;  for  it  to  have  a  meta— theory  and  be  able  to  reason  about 
that  behaviour  is  quite  another;  and  for  it  to  have  its 
behaviour  defined  by  the  statements  of  that  meta- theory  is  quite 
different  yet*  This  is  an  area  that  touches  on  some  of  the 
fundamental  properties  of  both  representation  and  computation, 
and  an  area  “that  remains  largely  unexplored* 


BIBLIOGRAPHY 


[Barr*  A.  and  Davidson?  J®?  1980] 

Representation  of  Knowledge*  Tech*  Rep*  No*  STAN— CS— 80—79 3 ? 
Dept*  oi  Comp*  Sci  •  ?  Stanford  U®  ?  1980* 

[Belnapf  N*?  1975] 

How  a  computer  should  think*  Contempory  Aspec ts  of 
Philosophy*  Proc*  of  the  Oxford  International  Symposium? 
1975. 

[Belnap?  N* ?  1977] 

A  useful  four— valued  logic*  Modern  Uses  of  Multiple-Valued 
Log! c *  Dunn?  J*  and  Epstein?  G*  (eds*)?  Reidel  Publishing 
Co  *  ?  19  77 • 

[Bobrow?  D. ?  and  Winograd?  T*?  1977] 

An  overview  of  KRL ?  a  knowledge  representation  language* 
Cognitive  Sc ie nc e ?  Vol*  1?  No*  1?  January  1977* 

[ Brachman ?  R*?  1976] 

A  structural  paradigm  for  representing  knowledge*  BBN  report 
No*  3605?  Bolt?  Beranek  and  Newman  Inc*?  1976* 

[Brachman?  R*?  1979] 

On  the  epistemological  status  of  semantic  networks* 

Ass  ocia  ti ve  Networks - The  Rep re  sentation  and  Use  of 

Knowledge  by  Computers  ?  Findler?  N*V*  ( ed« ) ?  Academic  Press? 
1979* 

(Brachman?  R*  and  Smith?  B*  1980] 

S IGART  New  sletter?  No*  70?  Special  issue  on  knowledge 
representation?  1980* 

[Bruce?  B*?  1973] 

A  logic  for  unknown  outcomes*  Report  CBM— TM— 35?  Dept*  of 


Comp*  Sci.»  Rutgers  University,  1973* 


[Codd,  E.  F.,  1970] 

A  relational  model  of  data  lor  large  shared  databases* 
Cotamun  ica  ti  ons  of  the  ACM  13  ,  June  19  70  • 

[Clark,  K.,  1978] 

Negation  as  failure.  Logic  a  nd  Data  Bases.  Gallaire,  H.  and 
Minker,  J*  (eds.),  Plenum  Press,  1978* 

[Cohen,  P*,  1978] 

On  knowing  what  to  say:  Planning  speech  acts*  Tech*  Rep*  No* 
118,  Dept*  of  Comp*  Sci • ,  U*  of  Toronto,  1978* 

[Collins,  A*,  Warnock,  E* ,  Aiello,  N*  and  Miller,  M. ,  1975] 

Reasoning  from  incomplete  knowledge*  Represen tat i on  and 
Understand! ng :  Studies  i n  Cogni five  Sci ence ,  Bobrow,  D*  and 

Collins,  A*  (eds*) ,  Academic  Press,  1975* 

[Deliyanni,  A*  and  Kowalski,  R*A*,  1979] 

Logic  and  semantic  networks*  CACM ,  Vol*  22,  No*  3,  1979* 

[Doyle,  J*  and  London,  P*,  1980] 

A  selected  descriptor— i ndexed  bibliography  to  the  literature 
on  belief  revision*  SIGART  N ewsl etter ,  No*  71,  1580* 

[Fahlman,  S*,  1979] 

NETL :  A  sys~t  era  for  represent  ing  and  using  real-world 

knowledge  *  M*I*T*  Press,  Cambridge,  1979* 

[Gallaire,  H*  and  Minker,  J*  (eds*),  1978] 

Logi c  a  nd  Data  Bases ,  Plenum  Press,  New  York,  1978* 

[Gettier,  E.  L.,  1967] 

Is  Justified  true  belief  knowledge?  Knowledge  and  Belief. 
Griffiths,  A.  P.  ( ed* } ,  Oxford  University  Press,  1967. 

[Grant,  J*,  1977] 

Null  values  in  a  relational  data  base*  I nforma ti on 
Processing  Letters,  No*  5,  1977* 

[Griffiths,  A*  P*»  ( ed* )  1967] 

Knowledge  and  Belief ,  Oxford  University  Press,  1967. 


[Hayes,  P**  1974] 

Some  problems  and  non— problems  in  representation  theory* 
Proc.  AISB  conference,  U*  of  Sussex*  1974* 

[Hayes*  P**  1977] 

In  defense  of  logic*  Proc*  IJCAI5*  MIT*  1977* 

[Hendrix*  G* *  1975] 

Expanding  the  utility  of  semantic  networks  through 
partitioning*  Proc*  IJCAI4,  Tbilisi*  Georgia*  1975* 

[Hewitt,  C. *  1972] 

Description  and  theoretical  analysis  (using  schemata)  of 
PLANNER,  a  language  for  proving  theorems  and  manipulating 
models  in  a  robot*  Tech*  Report  TR— 258*  MIT,  1972* 

[Hintikka,  J.*  1962] 

Knowledge  a  nd  Belief :  An  Introduc  tion  to  the  Logic  of  t  he 
two  Notions,  Cornell  University  Press*  1962* 

(Hintikka,  J.f  1971] 

Semantics  for  propositional  attitudes*  Re  f erenc  e  and 

Modality,  Linsky*  L*  (ed« ) *  Oxford  University  Press*  1971* 

(Hughes*  G*  and  Cresswell,  M**  1972] 

An  Introduc  tion  to  Modal  Logic  *  Methuen  and  Co*  Ltd**  1972* 

[Hurtubise*  Sydney  J*,  1982] 

An  epistemological  soldering  iron  for  Knowledge  Technicians* 
To  appear  in  the  International  Journal  of  Man— Man 
Communications*  1982* 

[Israel*  D*  J*  and  Brachman*  R*  J**  1981] 

Some  remarks  on  the  semantics  of  representation  languages* 
To  appear*  1981* 

[Joshi*  A*  and  Kaplan*  S*J**  1978] 

Cooperative  responses:  An  application  of  dicourse  inference 
to  data  base  query  systems*  Proc*  second  CSCSI/SCEIO  conf** 
U*  of  Toronto*  1978* 

[Kowalski,  R*,  1974] 

Predicate  logic  as  a  programming  language*  Proceedings  IFIP 


Congress*  1974. 


[Kleene,  S*C.,  1952] 

Introductio n  t  o  Metama thena tics*  North  Holland  Publishing 
Co • *  1952* 

(Kripke,  S. ,  1971] 

Semantical  considerations  on  modal  logic*  Reference  and 
Modality*  Linsky*  L*  (ed« ) ,  Oxford  University  Press,  1971* 

[Kripke,  S. ,  1972] 

Naming  and  necessity*  Semantics  o  f  Natural  Language , 
Davidson,  D*  and  G*  Harmon  (eds«  ),  E*  Eeidel  Publishing 
Company,  Dordrecht,  Holland,  1972* 

[Lehnert,  W*  and  Wilks,  Y*,  1979] 

A  critical  perspective  on  KRL*  C ogn i t ive  Scienc e  3i  1979* 

[Lemmon,  E*J*,  1965] 

Deontic  logic  and  the  logic  of  imperatives*  Logique  e  t 
Analyse ,  No*  29,  1965* 

[Levesque,  H*,  1977] 

A  procedural  approach  to  semantic  networks*  Tech*  Rep*  No* 
105,  Dept*  of  Comp*  Sci  •  ,  U*  of  Toronto,  1977* 

(Levesque,  H*,  1979] 

The  representation  of  incomplete  knowledge  as  applied  to  a 
logic  of  sentences*  AI  memo  79—1,  Dept*  of  Comp*  Sci*,  U*  of 
Toronto,  1979* 

[Levesque,  H*  and  Mylopoulos,  J*,  1979] 

A  procedural  semantics  for  semantic  networks*  Associa  tive 

Networks  -  The  Representation  and  Use  of  Knowledge  by 

Compute  rs ,  Findler,  N.V.  (ed*  ),  Academic  Press,  1979* 

[Linsky,  L*,  1977] 

Names  and  Descri pti ons «  University  of  Chicago  Press, 
Chicago,  1977* 

[Lipski,  W.,  1977] 

On  the  logic  of  incomplete  information*  Proc.  Symposium  on 
Mathematical  Foundations  in  Computer  Science,  Goos,  G*  and 


Hartnanist  J*  ( eds • ) ,  Springer— Verlag ,  1977* 


[Lipski,  W. ,  1978] 

On  semantic  issues  connected  with  incomplete  information 
data  bases*  TODS,  Vol*  4,  No*  3,  1978* 

[Liskov,  B*  and  Zilles,  S*,  1974] 

Programming  with  abstract  data  types*  SIGPLAN  Notices,  Vol* 
9,  No*  4,  1974* 

[McCarthy,  J. ,  1979] 

First  order  theories  of  individual  concepts  and 

propositions*  Mac  hine  intelligence  9,  Michie,  D*  ( ed* )  , 
University  of  Edinburgh  Press,  1979* 

[McCarthy,  J*  1980] 

Circumscription  —  A  form  of  no n  — mono tonic  reasoning* 

Art  if ic iai  Intelligence  13 ,  1980* 

[McCarthy,  J*  and  Hayes,  P*  ,  1969] 

Some  philosophical  problems  from  the  standpoint  of 
Artificial  Intelligence*  Ma  chine  I n t  ell i gene  e  4,  Michie,  D* 
and  Meltzer,  B*  (eds*).  University  of  Edinburgh  Press,  1969* 

[McCarthy,  J*,  Sato,  M* ,  Hayashi,  T*  and  Igarashi,  S* ,  1978] 

On  the  model  theory  of  knowledge*  Memo  AIM— 312,  Dept*  of 
Comp*  Sci* ,  Stanford  U*,  1978* 

[McDermott,  D*  1980] 

Non— monoton ic  logic  III  Non— mono  tonic  modal  theories* 

Research  Rep*  No*  174,  Dept*  of  Comp*  Sci*,  Yale  U*,  1980* 

[McDermott,  D*  and  Doyle,  J*,  1978] 

Non— monotonic  logic  I*  AI  memo  486,  AI  Lab*,  MIT,  1978* 

[Mendelson,  E* ,  1964] 

Introduction  to  Mathematical  Logic ,  Van  Rostrand  Reinhold 
Company,  1964* 

[ Merri am— Webster ,  1976] 

The  Merriam— Webs ter  Dictionary,  Simon  and  Schuster  of  Canada 
Ltd.,  1976* 


[ Minsky ,  M* , 


1974  ] 


A  framework  for  representing  knowledge*  AI  memo  306,  AI 
Lab.,  MIT,  1974. 

[Moore,  R.,  1975] 

Reasoning  front  incomplete  knowledge  in  a  procedural 
deduction  system.  Tech.  Rep.  AI-TR-347,  AI  Lab.,  MIT,  1975. 


[Moore,  R.,  1977] 

Reasoning  about  knowledge  and  action.  Proc.  IJCA15,  MIT, 
1977. 


[Moore,  R.,  1980] 

Reasoning  about  knowledge  and  action.  Technical  Note  191, 
Artificial  Intelligence  Center,  SRI  International,  Menlo 
Park,  1980. 

[Moore,  R.,  1980b] 

The  1  Auto— E p is t eraic 1  interpretation  of  non— mo no  tonic  logic. 
Unpublished  notes  from  a  workshop  ot.  formal  methods  in  AI, 
Moss  Landing,  Aug.  1980. 


[Moore,  R.  and  Hendrix,  G.  1979] 

Computational  models  of  belief  and  the  semantics  of  belief 
sentences.  Tech.  Note  187,  SRI  International,  Menlo  Park, 
Calif.,  1979. 


[Nash-Webber  B.  and  Reiter,  R.  1977] 

Anaphora  and  logical  form:  On  formal  meaning  representations 
for  natural  language.  Proc.  IJCAI5,  MIT,  1977. 

[Perrault,  C.R.,  Allen,  J.F.  and  Cohen,  P«,  1978] 

Speech  acts  as  a  basis  for  understanding  dialogue  coherence. 
Proc.  second  TINLAP  conference,  Urbana,  Illinois,  1978. 

[Pratt,  V.,  1976] 

Semantical  considerations  on  Floyd— Hoare  logic.  LCS  Tech. 
Rep.  TR— 168 ,  MIT,  1976. 

(Prior,  A.N.,  1967] 

Pas  t ,  Prese  n  t  and  Future ,  Oxford  University  Press,  1967. 
[Quine,  W.V.O.,  1971] 

Reference  and  modality.  Referenc e  and  Modali ty. 


Lins  ky ,  L 


(ed* ) j  Oxford  University  Press,  1971® 


[ Reiter,  R® ,  1978a] 

On  reasoning  by  default*  Proc  second  TINLAP  conference, 
Urbana,  Illinois,  1978* 

[Reiter,  R.  ,  1978b] 

On  closed  world  data  bases®  Logic  and  Data  Bases,  Gallaire, 
H*  and  Minker,  J®  (eds«  j  ,  Plenum  Press,  1978® 

[Reiter,  R® *  1980] 

A  logic  for  default  reasoning*  Ar tif i ci al  Intelligence  13, 
1980. 

[Reiter,  R*  and  Criscuolo,  G® f  1980] 

Some  representational  issues  in  default  reasoning®  Technical 
report  80—7*  Dept®  of  Computer  Science*  U®  of  British 
Columbia*  Vancouver*  1980® 

[Roberts*  R®  and  Goldstein,  I®*  1977] 

FRL  users's  manual®  AI  memo  No®  408*  AI  Lab®*  MIT,  1977® 

[Robinson*  J®A«*  1965] 

A  machine  oriented  logic  based  on  the  resolution  principle® 
JACM  12,  1965® 

[Roseboom,  W®,  1970] 

Why  I  know  so  much  more  than  you  do®  Knowing l  Essays  in  the 
Analysi s  o  f  Knowledge  *  Roth,  M®  and  Gallis*  L®  (eds®  )  , 
Random  House*  1970® 

[Roth*  M®  and  Gallis,  L®  (eds®)*  1970] 

Knowing :  Es  says  in  the  Analysis  of  Knowledge  *  Random  House* 

1970. 

[Schneider*  P® *  1979] 

A  formal  definition  of  contexts  in  the  Procedural  Semantic 
Network  formalism®  AI  — memo  79—5,  Dept®  of  Comp®  Sci®  *  U®  of 
Toronto*  1979® 

[Schubert,  L®»  1976] 

Extending  the  expressive  power  of  semantic  networks® 
Art i f ic ial  Intelligence  7*  No®  2*  1976® 


[ Shapiro  ,  S.  » 


1979] 


The  SNePS  semantic  network  processing  system*  Associtive 

Networks - The  Representation  an  d  Use  of  Knowledge  by 

Computers,  Findler,  N*V*  (ed. ) ,  Academic  Press,  1979* 

[Shapiro,  S*  and  Bechtel,  R* ,  1976] 

The  logic  of  semantic  networks*  Tech*  Rep*  No*  47,  Dept*  of 
Comp*  Sci • ,  U*  of  Indiana,  1976* 

[Smith,  B.,  1978] 

Levels,  layers  and  planes:  The  framework  of  a  system  of 
knowledge  representation  semantics*  Unpublished  M*  Sc* 
thesis,  AI  Lab.,  MIT,  1978. 

[Smullyan,  R*M*,  1968] 

First  Orde r  Logi c  *  Springer— Verlag  New  York  Inc*,  1968* 

[Stoy,  J*»  1977] 

Denotat iona 1  Semantic  s :  Th  e  Scott  — St rac hey  Approach  to 

Programming  Language  Theory ,  MIT  Press,  1977* 

[Sussman,  G*  and  McDermott,  D*,  1972] 

From  PLANNER  to  CONNIVER:  A  genetic  approach*  Proc.  of  the 
FJCC  41,  Part  2,  1972. 

[Van  Frassen,  B*C*  1966] 

Singular  terms,  truth— value  gaps  and  free  logic*  J ournal  of 
Phi 1 osophy  63,  1966* 

[Vassiliou,  Y*,  1980] 

A  formal  treatment  of  imperfect  information  in  Database 
Management*  Ph*  D.  thesis ,  Dept*  of  Comp*  Sci*,  U*  of 
Toronto,  1980* 

[Weyhrauch,  R*,  1980] 

Prolegomena  to  a  theory  of  mechanised  formal  reasoning. 
Art i f icial  Intelli gene  e  13,  1980* 

[Winograd,  T*,  1973] 

A  procedural  model  of  language  understanding.  Computer 
mod  els  o_f  t  bought  a  nd  1  angua  ge ,  Schank,  R*C*  and  Colby,  K.M* 


( eds* ) ,  W*  H*  Freeman  and  Co*, 


1973. 


[Winograd,  T.,  19723 

Understand!. ng  Natural  Language t  Academic  Press*  1972* 

[ Winograd,  T.,  1975] 

Frame  representations  and  the  procedural/ declarative 
controversy.  Be presentation  and  Understanding:  Studies  i n 
Cognitive  Sc ience «  Bobrow*  D.  and  Collins*  A.  (eds«)  , 
Academic  Press*  1975. 

[Woods*  W.,  1975] 

What's  in  a  link*  Foundations  for  semantic  networks. 
Representation  and  Understanding l  Studies  in  Cogni tive 
Science,  Bobrow*  D.  and  Collins,  A*  ( eds • ) *  Academic  Press, 
1975. 

[Zadeh*  L.*  1975 3 

Fuzzy  logic  and  approximate  reasoning.  Synthes e  30 ,  1975. 


University  of  Toronto 
Computer  Systems  Research  Group 


BIBLIOGRAPHY  OF  CSRG  TECHNICAL  REPORTS  1980  -  present 

*  -  Out  of  print 

*  CSRG^108  DIALOGUE  ORGANIZATION  AND  STRUCTURE  FOR 

INTERACTIVE  INFORMATION  SYSTEMS 
John  Leonard  Barron 
[M.Sc.  Thesis,  DCS,  1980] 

*  CSKG-109  A  UNIFYING  MODEL  OF  PHYSICAL  DATABASES 

D.S.  Batory,  C.C.  Gotlieb,  April  1980 

*  CSRG-1 10  OPTIMAL  FILE  DESIGNS  AND  REORGANIZATION  POINTS 

D.S.  Batory,  April  1980 

*  CSRG-111  A  PANACHE  OF  DBMS  IDEAS  Ill 

D.  Tsichritzis  (ed.).  April  1980 

CSRG-1 12  TOPICS  IN  PSN  -  II:  EXCEPTIONAL  CONDITION 

HANDLING  IN  PSN:  REPRESENTING  PROGRAMS  IN  PSN: 
CONTENTS  IN  PSN 

Yves  Lesperance,  Byran  M.  Kramer,  Peter  F.  Schneider 
April,  1980 

CSRG-1 13  SYSTEM-ORIENTED  MACRO-SCHEDULING 
C.C.  Gotlieb  and  A.  Schonbach 
May  1980 

CSRG-1 14  A  FRAMEWORK  FOR  VISUAL  MOTION  UNDERSTANDING 
John  Konstantine  Tsotsos 
[Ph.D.  Thesis,  DCS,  June  1990] 

CSRG-1 15  SPECIFICATION  OF  CONCURRENT  EUCLID 
James  R.  Cordy  and  Richard  C.  Holt 
July  1900 

CSRG-1 16  THE  REPRESENTATION  OF  PROGRAMS  IN  THE 

PROCEDURAL  SEMANTIC  NETWORK  FORMALISM 

Bryan  M.  Kramer 

[M.Sc.  Thesis,  DCS,  1990] 

CSRG-1 17  CONTEXT-FREE  GRAMMARS  AND  DERIVATION  TREES  AS 
PROGRAMMING  TOOLS 
Volker  Linnemann 
September  1950 

CSRG-1 18  S/SL:  SYNTAX/SEMANTIC  LANGUAGE 
INTRODUCTION  AND  SPECIFICATION 
R.C.  Holt,  J.R.  Cordy,  D.H.  Wortrnan 
CSRG,  September  1900 


-  2- 


CSRG-119  PT:  A  PASCAL  SUBSET 
Alan  Rosselet 

[M.Sc.  Thesis,  DCS,  October  1980] 

CSRG-120  PTED:  A  STANDARD  PASCAL  TEXT  EDITOR  BASED  ON 
•  THE  KERNIGHAN  AND  PLAUGER  DESIGN 
Ken  Newman,  DCS 
October  1980 

CSRG-121  TERMINAL  CONTEXT  GRAMMARS 
Howard  W.  Trickey 
[M.Se.  Thesis,  EE,  September  1980] 

CSRG-122  THE  APPROXIMATE  SOLUTION  OF  LARGE  QUEUEING 
NETWORK  MODELS 
John  Zahorjan 

[Ph.D.  Thesis,  DCS,  August  1980] 

CSRG-123  A  FORMAL  TREATMENT  OF  IMPERFECT  INFORMATION 
IN  DATABASE  MANAGEMENT 
Yannis  Vassiliou 

[Ph.D.  Thesis,  DCS,  September  1980] 

CSRG-124  AN  ANALYTIC  MODEL  OF  PHYSICAL  DATABASES 
Don  S.  Batory 

[Ph.D.  Thesis,  DCS,  January  1981] 

CSRG-125  MACHINE-INDEPENDENT  CODE  GENERATION 
Richard  H.  Kozlak 
[M.Sc.  Thesis,  DCS,  January  1981] 

CSRG-12G  COMPUTER  MACRO-SCHEDULING  FOR  HIGH  PRODUCTIVITY 
Abraham  Schonbach 
[Ph.D.  Thesis,  DCS,  March  1981] 

CSRG-127  OMEGA  ALPHA 

D.  Tsichritzis  (ed,),  March  1981 

CSRG-128  DIALOGUE  AND  PROCESS  DESIGN  FOR  INTERACTIVE 
INFORMATION  SYSTEMS  USING  TAXIS 
John  Barron,  April  1981 

CSRG-129  DESIGN  AND  VERIFICATION  OF  INTERACTIVE  INFORMATION 
SYSTEMS  USING  TAXIS 
Harry  K.T.  Wong 

[Ph.D.  Thesis,  DCS,  to  be  submitted] 

CSRG-130  DYNAMIC  PROTECTION  OF  OBJECTS  IN  A  COMPUTER  UTILITY 
Leslie  H.  Goldsmith,  April,  1981 

CSRG-131  INTEGRITY  ANALYSIS:  A  METHODOLOGY  FOR  EDP  AUDIT 
AND  DATA  QUALITY  CONTROL 
Maija  Irene  Svanks 
[Ph.D.  Thesis,  DCS,  February  1981] 


-  3- 


CSRG-132  A  PROTOTYPE  KNOWLEDGE-BASED  SYSTEM 

FOR  COMPUTER-ASSISTED  MEDICAL  DIAGNOSIS 

Stephen  A.  Ko-Tai 

[M.Sc. Thesis,  DCS,  January  1981] 

CSRG-133  SPECIFICATION  OF  CONCURRENT  EUCLID 
James  R.  Cordy,  Richard  C.  Holt 
_  August  1981  (Version  1) 

CSRG-134  ANOTHER  LOOK  AT  COMMUNICATING  PROCESSES 
E.C.R.  Hehner  and  C.A.R.  Hoare,  July,  1991 

CSRG-135  ROBUST  CONCURRENCY  CONTROL  IN  DISTRIBUTED  DATABASES 
Derek  L.  Eager 

[M.Sc.  Thesis,  DCS,  October  1981] 

CSRG-136  ESTIMATING  SELECT1VITIES  IN  DATA  BASES 
Stavros  Christodoulakis 
[Ph.D.  Thesis.  DCS,  December  1981] 

CSRG-137  SATISFYING  DATABASE  STATES 
Marc  H.  Graham 

[Ph.D.  Thesis,  DCS,  December  1981] 

CSRG-138  IMPROVING  THE  PERFORMANCE  OF  DATA  BASE  SYSTEMS 
Geovane  Cayres  Magalhaes 
[Ph.D.  Thesis,  DCS,  December  1981] 

CSRG-139  A  FORMAL  TREATMENT  OF  INCOMPLETE  KNOWLEDGE  BASES 
Hector  J.  Levesque 
[Ph.D.  Thesis,  DCS,  February  1982] 


■■  *  ■  . 


. 


. 


, 


